ILTA Voices

Has the Time Come for Passwords to Take a Back Seat to Security


Listen Later

The majority of breaches today no longer come through delivered malware as our systems have become very strong with detecting and blocking these resulting in more effort than value for the attacker. Instead, it’s easier, faster and more economical to just try and steal your password, or better yet have you provide it yourself. This podcast takes a look at the security risks that are actually derived from one of our more important security controls… passwords; and look at what we can do to minimize those risks moving forward.


Questions Dave will ask the speakers:

  1. A recent study by Verizon found that more than 80 percent of breaches through hacking involve brute force or the use of lost or stolen credentials. Microsoft estimates that there are 921 password attacks per second. We’ve been educated for years by the security industry and our awareness programs that passwords are the most crucial component to protecting our environments and our information. How is it that this sacred key to our kingdom is actually resulting in opening so many doors for attackers?
  • NIST has taken steps to try and reduce the bleeding with their new Password guidelines and best practices which encourage passphrases of more characters, less complexity and less changes. Are these steps in the right direction to actually keeping us secure?
  • Many security tools are now providing artificial intelligence around login requests that look to see if the member is coming from a known device and location prior to providing access. Would implementing these types of risk based controls with MFA and a passphrase by the answer to our problems?
  • Biometrics for authentication always seemed to be the next logical step for passwords. We have our basic biometrics on devices however, those are all back supported by a password or PIN. Will we ever get to a place where we’re truly only using biometrics for all authentication?
  • I understand that Apple, Google and Microsoft are working on a solution together that will get rid of passwords. Instead, they will just leverage the biometrics on your phone as your access code to everything. With this in mind do we just need to sit tight and all our troubles will soon be fixed?

  • Moderator:
    @David Whale - Director Information Security, Fasken Martineau Dumoulin LLP

    Speakers:
    Sohail Iqbal - CISO, Veracode
    Eldon Sprickerhoff - Founder and Chief Innovation Officer, eSentire
    Phillip Solakov - Director, Client Solutions, Optiv, Inc.

    Recorded on 09-09-2022​

    ...more
    View all episodesView all episodes
    Download on the App Store

    ILTA VoicesBy ILTA - International Legal Technology Association

    • 5
    • 5
    • 5
    • 5
    • 5

    5

    8 ratings


    More shows like ILTA Voices

    View all
    Legal Talk Network - Law News and Legal Topics by Legal Talk Network

    Legal Talk Network - Law News and Legal Topics

    85 Listeners

    WTF with Marc Maron Podcast by Marc Maron

    WTF with Marc Maron Podcast

    29,977 Listeners

    Monday Morning Podcast by All Things Comedy

    Monday Morning Podcast

    32,288 Listeners

    The Bill Simmons Podcast by The Ringer

    The Bill Simmons Podcast

    30,186 Listeners

    Pivot by New York Magazine

    Pivot

    9,539 Listeners

    32 Thoughts: The Podcast by Sportsnet

    32 Thoughts: The Podcast

    1,921 Listeners

    The Peter Attia Drive by Peter Attia, MD

    The Peter Attia Drive

    8,154 Listeners

    Conan O’Brien Needs A Friend by Team Coco & Earwolf

    Conan O’Brien Needs A Friend

    59,389 Listeners

    Fiction - Comedy Fiction by The Sunset Explorers

    Fiction - Comedy Fiction

    6,451 Listeners

    All-In with Chamath, Jason, Sacks & Friedberg by All-In Podcast, LLC

    All-In with Chamath, Jason, Sacks & Friedberg

    9,832 Listeners

    The Ezra Klein Show by New York Times Opinion

    The Ezra Klein Show

    16,174 Listeners

    Plain English with Derek Thompson by The Ringer

    Plain English with Derek Thompson

    2,277 Listeners

    The Town with Matthew Belloni by The Ringer

    The Town with Matthew Belloni

    1,076 Listeners

    The Mel Robbins Podcast by Mel Robbins

    The Mel Robbins Podcast

    20,121 Listeners

    Legal Innovation Spotlight by Infodash

    Legal Innovation Spotlight

    9 Listeners