By Ron W. Brittian – Chairman & CEO
There are several layers of protection required to implement effective information security in today’s “wired world”: device (computer, smart phone, etc), software, database, network, etc. These are well documented across vendor literature, analyst reports and through-out the media.
One of the biggest vulnerabilities of information security is stolen passwords. There are a myriad of ways to steal them (Google on “ways to steal passwords”), and many millions have already been stolen (Google the term “stolen passwords”: 3,150,000 results!). And who knows how many millions more have been stolen that are “not known” or “not reported”? Will YOU be next?
The problem is increasing exponentially: proliferation of connectivity, smarter hackers, disgruntled employees, terrorism, etc. Some quick numbers:
- 14 people hacked per second
- 1.5 Billion wired individuals (over 10 Passwords each)
- 1 Million new Facebook subscribers per day
- 34% of online banking transactions compromised
- 140+ Million records compromised already in 2010
- 28,940 different malicious software detected
- Employees source of 48% of corporate breaches
- Approx $1.4 Trillion damages to Global economy in 2009
In a fantasy world, suppose your “device” was surrounded by an invisible magic shield that protected it from all malware. If someone steals your password by another means, you are still highly susceptible to be the next victim of cybercrime.
What can you do about it?
Several “second-factor authentication” solutions are available in the market today – with varying degrees of complexity, effectiveness, usability, cost, etc. One of the most effective, simple and affordable solutions is the use of Keystroke Dynamics, which is a form of behavioral biometrics. Using this innovative approach, the dire consequences of a stolen password can be substantially avoided. Keystroke Dynamics can serve as a powerful complement to the pervasive malware software suites.
[...] “Intrusion Detection and Prevention Programs” are certainly necessary, but not sufficient, to attack these enormous security weaknesses. As I have said before, “If someone steals your Password by another means, you are still highly susceptible to be the next vi… [...]
[...] you have been following this blog for a while I’m sure you can understand, but if not, read Ron’s post from a few weeks [...]