This week marks the fourth of National Cyber Security Awareness Month (NCSAM), which is held every October in an effort to engage and educate the public about issues surrounding cybersecurity. The theme of week four is “Your evolving digital life.” One of the main security controls that is poised to ease security concerns in the future is the use of more secure authentication mechanisms.

Increasing Connectivity

Today, the use of mobile devices such as smartphones and tablets appears to be almost ubiquitous. Digitization is progressing rapidly and will soon become part of our everyday lives in the form of wearables, smart homes and connected cars and medical devices. The impact will be huge.

According to the Pew Research Center, increasing digitization will revolutionize most human interaction over the next decade, impacting health care, education, work, politics, economics and entertainment in particular. This is the vision of the Internet of Things (IoT), where technology is pervasive and billions of devices are connected to the Internet. While that connectivity will have a positive impact in many areas, there is also a downside in terms of security as greater connectivity will attract attackers who wish to take advantage of our evolving digital lives.

Technology has created great convenience, allowing workers to be more productive from anywhere and enabling instant communication. But enhanced connectivity means that our identities and privacy can be negatively affected, and in some cases, identities can be stolen. A solution is needed to ensure that online identities are more adequately protected in the future than they are at present.

New Methods of Authentication Required

The primary method of authentication for protecting our identities, the devices we use and the resources we access is a username and password combination. But as digitization continues to expand, the sheer number of credentials that we need to remember and manage can become overwhelming.

Different applications and services have their own requirements for passwords in terms of complexity and how often they must be changed. Faced with this situation, many people resort to insecure password management practices such as writing down hard-to-remember passwords or using the same code for multiple services.

To improve this situation and access sensitive applications and services, many service providers require the use of stronger forms of authentication. For many years, hardware security tokens have been the main mechanism used. But these are expensive to provision, and such tokens are generally only used for one discrete application. Because of this, software-based tokens with one-time passwords have come into greater use, often sent to users via mobile phones. Even this can be an inconvenience since the user generally has to pay for this service every time a passcode is generated.

One authentication option that is growing in use is biometrics, helped by the inclusion of fingerprint sensors in mobile phones by many major hardware manufacturers, as well as by service providers such as banks that are increasingly issuing mobile apps that require biometric authentication. According to ABI Research, shipments of fingerprint sensors for smartphones will reach 1 billion by 2020, translating to a cumulative average annual growth of 17 percent. Other forms of biometric identifiers are also seeing growth, including iris recognition in access control for health care applications.

Although slow to take off, owing in part to cost and security concerns, biometric authentication appears to be finally coming into its own. By building sensors into more devices, consumers will further appreciate the speed and convenience that biometrics offer, which will do much to boost security as digital lives continue to evolve.

More from Identity & Access

Cybersecurity in the Next-Generation Space Age, Pt. 3: Securing the New Space

View Part 1, Introduction to New Space, and Part 2, Cybersecurity Threats in New Space, in this series. As we see in the previous article of this series discussing the cybersecurity threats in the New Space, space technology is advancing at an unprecedented rate — with new technologies being launched into orbit at an increasingly rapid pace. The need to ensure the security and safety of these technologies has never been more pressing. So, let’s discover a range of measures…

Backdoor Deployment and Ransomware: Top Threats Identified in X-Force Threat Intelligence Index 2023

Deployment of backdoors was the number one action on objective taken by threat actors last year, according to the 2023 IBM Security X-Force Threat Intelligence Index — a comprehensive analysis of our research data collected throughout the year. Backdoor access is now among the hottest commodities on the dark web and can sell for thousands of dollars, compared to credit card data — which can go for as low as $10. On the dark web — a veritable eBay for…

Kronos Malware Reemerges with Increased Functionality

The Evolution of Kronos Malware The Kronos malware is believed to have originated from the leaked source code of the Zeus malware, which was sold on the Russian underground in 2011. Kronos continued to evolve and a new variant of Kronos emerged in 2014 and was reportedly sold on the darknet for approximately $7,000. Kronos is typically used to download other malware and has historically been used by threat actors to deliver different types of malware to victims. After remaining…

An IBM Hacker Breaks Down High-Profile Attacks

On September 19, 2022, an 18-year-old cyberattacker known as "teapotuberhacker" (aka TeaPot) allegedly breached the Slack messages of game developer Rockstar Games. Using this access, they pilfered over 90 videos of the upcoming Grand Theft Auto VI game. They then posted those videos on the fan website Gamers got an unsanctioned sneak peek of game footage, characters, plot points and other critical details. It was a game developer's worst nightmare. In addition, the malicious actor claimed responsibility for a…