October 30–31, 2016: Training
October 31–November 2, 2016: Tutorials & Conference
New York, NY

Lessons learned from billions of authentication events

Mike Hanley (Duo Security)
1:15pm–1:55pm Wednesday, 11/02/2016
Sponsored
Location: Petit Trianon (Sponsored)
Average rating: ****.
(4.00, 1 rating)

What you'll learn

  • Explore the major trends and patterns at Internet scale emerging from Duo's unique visibility into the users, devices, networks, and services that make up enterprise remote access

Description

As an access security provider, Duo sees billions of authentication and access events each year from tens of thousands of customers across huge user and device populations. Mike Hanley presents the major trends and patterns at Internet scale emerging from Duo’s unique visibility into the users, devices, networks, and services that make up enterprise remote access, with a special emphasis on trends in across verticals as well as the security posture of various popular mobile device configurations.

Mike presents key findings from mining this dataset of total events Duo services process to provide unique insights to the broader security and information technology communities before concluding with the top 10 actions IT administrators and decision makers can take from this talk and apply today. You’ll leave this talk with actionable information about the changing security landscape, with specific insights into strong authentication, platform management, and policy­-based access control mechanisms, all derived from a one­-of-a-kind dataset representing billions of events tied into over 70 other cloud and endpoint services to provide strong authentication, device insight, and platform security controls to some of the world’s most valuable brands.

Topics include:

  • User authentication ­
  • Trends in BYOD and their impact on the demise of hard­-token 2FA ­
  • Patterns of multi­factor authentication usage and adoption across sectors
  • Adoption rates of OS/browser platform updates at major patch intervals ­
  • Analysis of sunset phone hardware used for access and authorization and the risks associated with dated handsets no longer supported with OS updates services ­
  • How Duo has approached data warehousing and analysis to support a diverse, rapidly­ growing dataset ­
  • Remaining challenges in usable security and the most important things Duo has learned about security UX

This session is sponsored by Duo Security.

Photo of Mike Hanley

Mike Hanley

Duo Security

Mike Hanley is the director of Duo Labs, the advanced security research and analysis team at Duo Security. Prior to joining Duo, Mike was a senior member of the technical staff at CERT/CC, where he conducted applied R&D on a variety of cyber issues in support of the Department of Defense and the Intelligence community. He holds an MS in information security policy and management from Carnegie Mellon University and an undergraduate degree in economics from Michigan State University.