BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Post-Password Predictions And What They Mean For You

Posted January 18, 2012    Peter McCalister

The list of problems with passwords has been documented over and over again: Users keeping spreadsheets of their personal passwords, using ordinary everyday words, keeping their passwords on sticky notes, or constantly harassing the IT department for help with forgotten passwords–the list goes on and on.

Even clever password creation and rating sites have been created to help mitigate the password problem.

As Charlie Osborne writes in this ZDNet article on the subject, “We’ve all had those moments, cursing under our breath, when after three attempts you are locked out just as you remember the actual word and number combination. Or even worse, forced to fill out mud-smear captchas until your eyes start to swim.”

Sound familiar? It’s certainly frustrating. So what’s coming down the pipe? IBM recently put out a video with some predictions of what will be coming down the pipe as a possible replacement for passwords.

Whether or not IBM is right on with their predictions or not, the future of authentication will almost surely include some sort of biometric identification. Something that is truly unique to you and only you. Imagine being able to securely login to your system just by saying your name. It’s well within reason.

So what does this mean for you? Well, no future authentication system will be successful unless it ties back to a centralized identity store. At BeyondTrust we’re certainly advocates of centralizing your users’ identities within Microsoft Active Directory–the main directory of choice for nearly all top enterprise companies.

And no matter what platform you and your vast network of users are logging in to–whether Windows, Linux, Unix, or Mac OS X desktops or servers, physical or virtual–the authentication should map back to AD, and have a full history of authentication events available for auditing. As the future of password authentication evolves, you can be sure that BeyondTrust will be on the cutting edge of adopting these new technologies into our AD bridge solutions.

Leave a Reply

Additional articles

ovum-research

New Analyst SWOT Assessment Identifies Key Strengths of PowerBroker

Posted November 24, 2014    Scott Lang

Following on the heels of the Gartner PAM market guide and Frost & Sullivan review of Password Safe comes a new analyst review of our BeyondInsight and PowerBroker platforms, a SWOT assessment of BeyondTrust written by Ovum. Ovum’s honest and thorough review of BeyondTrust indicates that we are delivering, “…an integrated, one-stop approach to PAM….

Tags:
, , ,

Patented Windows privilege management brings you unmatched benefits

Posted November 24, 2014    Scott Lang

We are pleased to announce that BeyondTrust has been granted a new U.S. Patent (No. 8,850,549) for privilege management, validating our approach to helping our customers achieve least privilege in Windows environments. The methods and systems that we employ for controlling access to resources and privileges per process are unique to BeyondTrust PowerBroker for Windows….

Tags:
6

A Quick Look at MS14-068

Posted November 20, 2014    BeyondTrust Research Team

Microsoft recently released an out of band patch for Kerberos.  Taking a look at the Microsoft security bulletin, it seems like there is some kind of issue with Kerberos signatures related to tickets. Further information is available in the Microsoft SRD Blogpost So it looks like there is an issue with PAC signatures.  But what…

Tags:
, , , ,