In-depth

Identity: the heart of all security problems

The joke is, on the internet, no-one knows you're a dog. In fact, weak identity remains one of IT's core security problems.

Inside the Enterprise: In technology, a whole host of problems boil down to identity and authentication issues.

Is the right person accessing the right records on a database? Is that laptop encrypted? Is sensitive email being viewed only by those who are entitled to see it? Is the person using mobile banking, who they claim to be?

Advertisement - Article continues below

A host of problems from data loss to spam have their roots in weak identity, and in particular, our continued reliance on passwords.

It is an ambitious goal. And, as the Global Identity Foundation concedes, it has been tried before with only limited success.

In a report looking at the cyber security threat landscape during 2013, the European Union's cyber security agency (ENISA), points out that if end users adopted simple security measures, it would halve the number of cyber attacks, even as hackers have increased the sophistication of their tools.

A need for strong, secure, end-to-end authentication was identified by ENISA as one issue that everyone involved in the internet economy needs to consider.

And the idea of establishing a single ecosystem for strong identity lies behind the formation of a new organisation, the Global Identity Foundation.

The new body builds on work started by organisations such as the Jericho Forum and the Cloud Security Alliance, but takes the idea further. The goal is ambitious: to create a secure identity model that can work just as well for people, devices and organisations, but yet isn't controlled by any one organisation, or relies on any single piece of technology or equipment, such as a token.

Featured Resources

Top 5 challenges of migrating applications to the cloud

Explore how VMware Cloud on AWS helps to address common cloud migration challenges

Download now

3 reasons why now is the time to rethink your network

Changing requirements call for new solutions

Download now

All-flash buyer’s guide

Tips for evaluating Solid-State Arrays

Download now

Enabling enterprise machine and deep learning with intelligent storage

The power of AI can only be realised through efficient and performant delivery of data

Download now
Advertisement

Most Popular

Visit/software/video-conferencing/355138/zoom-beaming-ios-user-data-to-facebook-for-targeted-ads
video conferencing

Zoom beams iOS user data to Facebook for targeted ads

27 Mar 2020
Visit/infrastructure/server-storage/355118/hpe-warns-of-critical-bug-that-destroys-ssds-after-40000-hours
Server & storage

HPE warns of 'critical' bug that destroys SSDs after 40,000 hours

26 Mar 2020
Visit/software/355113/companies-offering-free-software-to-fight-covid-19
Software

These are the companies offering free software during the coronavirus crisis

25 Mar 2020
Visit/mobile/mobile-phones/355088/apple-lifts-iphone-purchase-restrictions
Mobile Phones

Apple lifts iPhone purchase restrictions

23 Mar 2020