Todd Peterson, from One Identity, delivered the second part of the AusCERT 2017 opening keynote. One Identity may sound like a new business but it\u2019s an offshoot from Dell EMC and Quest Software.<\/p>\n
\u201cIf you think about all the attacks coming in, they boil down to identity,\u201d said Peterson.<\/p>\n
While your user account, said Peterson, might seem to be quite useless to an attacker, once a threat actor has access to a system on the network, whether that\u2019s through remotely accessing a system or by using a physical attack vector such as compromised USB flash drive, they will attempt to move laterally through an organisation. During that exploration, they will seek weaknesses in the barriers between systems to exploit.<\/p>\n
\u201cIf you can control who has access to what and you know who they are, you can cut off a lot [of attacks] at the knees,\u201d said Peterson.<\/p>\n
Peterson says it comes down to four \u201cA\u201ds; authentication, authorisation, administration, and audit.<\/p>\n
Read more at – AusCERT 2017 – Identity is the new perimeter<\/a><\/p>\n
![\"Allidm](\"https:\/\/i0.wp.com\/allidm.com\/blog\/wp-content\/uploads\/2015\/11\/Allidm-IdentityAccessManagement.png?resize=10%2C10\")
<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"