Elderly People’s Ankles
Characterizing Artifacts of Legacy Security Technology and Their Effects on Modern
Applications of Authentication and Authorization
Hi.
Nay @toopherjosh
Ian Glazer and I have a bet…
Who can use the most slides without affecting quality?
I
will
win.
Let’s get to it –
Picture of “children”
Let’s play a game.
Seriously… I’ll wait until you agree…
Picture 1.2
Picture 1.1
Picture 2.1
Picture 2.2
Picture 2.2
Picture 2.2
Statistics
µ
σ
The null
There is a 68% chance this is boring.
A long long time ago…
In the year 2000…
Don’t judge – you had one too.
Where even the water has calories
null hypothesis = you are a good person
You are a terrorist.
null hypothesis = you are a terrorist.
You are a terrorist shoe bomber.
null hypothesis = you are a shoe bomber.
elderly people’s ankles
elderly people’s ankles
EPA
Picture 3.1
Picture 3.2
You are not you.
You are not you.
You are not you.
null hypothesis = you are not you.
you are not you.
you are not you.
your user
you are not you.
your user customer
1 act play
Act 1 <login>
3 act play
Act 1 <login>
Act 2 <action>
Act 3 <logout>
Yes… I totally had to look all that up on wiki
?
Act 1 <login>
Act 2 <action>
<Act 1>
Act 1 <login>
Act 2 <action>
A Happy Ending?
Repetition Poisoning
We retain the right to rename your kids
Repetition Poisoning
Repetition Poisoning Test
ILK BILK SILK
What fiber to SILKworms produce?
ILK BILK SILK
ILK BILK SILK
What’s another word for DEFRAUD?
ILK BILK SILK
ILK BILK SILK
What’s a word to describe a person or thing similar to which you’ve previously
referred?
ILK BILK SILK
ILK BILK SILK
What do cows drink?
Wrong.
Cows drink water.
</Act 1>
<Act 2>
?
<Act 2.1>
U/P + device recognition < MITB
U/P + device recognition < Zeus
1 / 30 days
3-4 times per day
MFA @ 1%
invisibility ≠ omission
</Act 2.1>
<Act 2.2>
?
UX
UX è optimized
UX è optimized = no modification to human behavior
Context
</Act 2.2>
<Act 2.31>
Identity is valuable.
Identity, Inc.; NYSE: IDNT
Yeah you are.
</Act 2.31>
<Act 2.32>
The Internet of Things (IoT)
The Internet of Things (IoT) <groan>
Relying Party Benefit User Benefit
Relying Party Benefit User Benefit
Context creates invisibility.
Invisibility enables security.
</Act 2.32>
<Act 3>
Act 3 <logout>
?
Optimize UX
Context creates invisibility.
Invisibility enables security.
</Act 3>
Session Login Cri5cal Ac5on Session Logout
Shift in perspective can identify EPAs
Invisibility enables security.
Great. So what do I do?
Laws of Modern MFA
1. Tell the user what you’re doing.
2. Communicate completely out of band.
3. Get out of their way (invisibility)
1. Tell the user what you’re doing. 2. Communicate completely out of band. 3. Get out of their way (invisibility)
Laws of Modern MFA
@toopherjosh Thanks.
Recommended
