Authentication

Physical and logical security are perhaps the most considered security aspects of many businesses. However, one of the easiest and most common attacks is based around the user. For example, phishing generally tries to get a user to fill in login credentials on a bogus website. Password cracking programs /dictionary attacks try to guess a password and therefore access a protected resource.

So anyone using internet requiring username/password access to a system (eg: e-mail, finance, CRM and other systems) represents a point of vulnerability. Users often use a single easy to remember password to access all these systems. Even if you have good password security - users required to change their password every month - this means more & more passwords and more hassle for users.

Ultimately, the consensus that password based security is not free. If you consider the cost of helping users recover forgotten or expired passwords or the cost of a breech of security; passwords can seem a false economy. Industry pundits believe the cost of a password recover is £30, and the average user will need one or 2 resets per year.

2- Factor Authentication

Two-factor authentication is a method of eliminating passwords by combining two different factors of authentication. 2-Factor is defined as using a combination of something the has with something only the user knows. One of these is usually a token that can generate a one-time code together with a user memorised PIN number. A token could also be generated by software to a Mobile phone or Blackberry device.

Implementation of such systems is quite straight forward, with RSA being the market leader with SecurID. We also offer Safeword, as a slightly cheaper alternative. The key is that users are issued with tokens, which are registered to them, and a server component then provides the link between the key generated by the token, a PIN code for that users, and the system requiring the authentication. Firewalls, SSL-VPN and domain based applications can all be configured to use a 2-factor authentication system.

 

RSA

Purpose-built security solutions designed to satisfy customer networking and security requirements that range from small branch office to high speed carrier and data centre environments.

Key features:

• Wide range of high performance appliances with a consistent management interface with common facilities from bottom to top of the range.
• Tightly integrated set of best-in-class security applications to protect against Worms, Trojans, Viruses and other malware
• Flexible configuration options, allows integration to most network environments

For more information and product details, click here

 

SecureComputing

SafeWord 2008 two-factor authentication protects your most important assets and applications. SafeWord's easy-to-use tokens and seamless integration with your existing Microsoft infrastructure make it simple to deploy two-factor authentication for VPNs, Citrix applications, Web applications, Webmail, and Outlook Web Access.

With the push of a button, Secure SafeWord tokens generate a highly secure, one-time passcode that can never be re-used, hacked, or otherwise compromised. The Secure SafeWord passcode provides a secure, two-factor authentication mechanism that ensures that only properly authenticated users are authorized access to critical applications and data.

For more information and product details, please visit our online store