Identity analytics
“Identity analytics is the next evolution of the IGA (Identity Governance & Administration) market. Identity professionals can use this emerging set of solutions combining big data and advanced analytics to increase identity-related risk awareness and enhance IAM processes such as access certification, access request and role management.” --gartner
Identity related risk awareness
Access certification is the process of validating access rights within systems. ... With access certification, organizations and regulations aim to formally validate users within systems and ensure their access rights are appropriate.
Access request - a system must validate that a user has need-to-know
Role management - users must be validated in a particular role or roles (admin, superuser, backup controller, launch manager, code committer)
What kind of threats are you protecting against?
What do you solve that proper administration of users can do?
How does technology like this improve IAM processes?
If it gathers heuristics, what happens when a user changes? (loses an arm, finger, or sneezes during password login, or just ages?)
Where is the best fit for these kinds of systems?
Where should you put these systems if you’re in a blended environment? And how does this work with systems like Active Directory?
Privacy issues… what if any do you have to deal with in this case?
That was my next question
Entitlements? What’s the difference between AuthN?
Identity creep -Ben gave a talk on it https://www.brighttalk.com/webcast/17685/362274
Does this monitor, or will it also prevent?
If it doesn’t, can it send alerts to you IPS to isolate?
“Blast radius”
https://whatis.techtarget.com/definition/behavioral-biometrics
Check out our Store on Teepub! https://brakesec.com/store
Join us on our #Slack Channel! Send a request to @brakesec on Twitter or email bds.podcast@gmail.com
#Brakesec Store!:https://www.teepublic.com/user/bdspodcast
#Spotify: https://brakesec.com/spotifyBDS
#RSS: https://brakesec.com/BrakesecRSS
#Youtube Channel: http://www.youtube.com/c/BDSPodcast
#iTunes Store Link: https://brakesec.com/BDSiTunes
#Google Play Store: https://brakesec.com/BDS-GooglePlay
Our main site: https://brakesec.com/bdswebsite
#iHeartRadio App: https://brakesec.com/iHeartBrakesec
#SoundCloud: https://brakesec.com/SoundcloudBrakesec
Comments, Questions, Feedback: bds.podcast@gmail.com
Support Brakeing Down Security Podcast by using our #Paypal: https://brakesec.com/PaypalBDS OR our #Patreon
https://brakesec.com/BDSPatreon
#Twitter: @brakesec @boettcherpwned @bryanbrake @infosystir
#Player.FM : https://brakesec.com/BDS-PlayerFM
#Stitcher Network: https://brakesec.com/BrakeSecStitcher
#TuneIn Radio App: https://brakesec.com/TuneInBrakesec
No comments:
Post a Comment