INGATE

From The Sip Trunking Experts

TMCNet:  Cloud Security: Lessons from Asgard

[December 03, 2012]

Cloud Security: Lessons from Asgard

Dec 3, 2012 (GlobeNewswire via COMTEX) -- Gartner Identity and Access Management Summit, Las Vegas, Dec. 3, 2012 (GLOBE NEWSWIRE) -- With only a slight nod to the recent blockbuster movie "The Avengers," Authentify Chief Technology Officer Andy Rolfe unveiled his original thinking on a four-dimensional "Security Tesseract" at Gartner's annual Identity and Access Management Summit, held December 2nd to 5th at Caesar's Palace.


"The cloud is a truly multi-dimensional environment," said Rolfe. "Analyzing your risks, fraud vectors and defenses must account for and adapt to the four dimensions of identity sources, communications channels, data acquisition planes and authentication defense factors. Seeing this as analogous to a tesseract is an elegant way to view the challenge because the four vectors are intertwined, and a change in one plane impacts the others." While Rolfe posits that the rapid evolution to corporate BYOD environments increases the risk surfaces in this four dimensional view, he also illustrates how smart phones, tablets and other Intelligent Personal Devices, or IPD's, can be used to implement stronger security and remote user authentication.

Like the guarded Bifrost bridge that securely linked earth to Asgard in Norse mythology, an out-of-band (OOB) secure link using mobile devices or PCs can be used to defend against any known threats to the four dimensions of cloud security. True to the tesseract analogy, a secure OOB link reflects across all of the surfaces, protecting each from man-in-the-middle, man-in-the-browser, DNS poisoning, malicious hotspots, phishing and other known IT security threats.

"It is certainly a thought provoking way to look at the challenge of knowing who exactly is in your cloud and what they can get at while they are there," according to Tom Swiontek, an IT security industry consultant. "I've not seen the problem presented in this way before." For effective cloud security in all four dimensions, Authentify offers its new 2CHK app and OOB authentication service. Here's how it works. The end user activates a small, convenient app on their smartphone or PC and links it securely to their company login account or identity directory using voice or SMS-based OOB authentication. Once this is done, the 2CHK app is "always on" and maintains a secure channel to Authentify's authentication service.

The first key benefit is security. 2CHK complements IT or online and mobile banking security by providing a completely separate app and OOB channel that protects against stolen passwords and, due to layers of encryption, cannot be defeated by man-in-the-middle and man-in-the-browser attacks. The second key benefit is convenience. Online or mobile commerce customers or IT network users see transactions in the 2CHK app immediately and can confirm or reject them easily.

Authentify was the first to offer a security service based on synchronizing a telephone call for remote user authentication. Since introducing the service in 2001, Authentify has developed authentication schemas and solutions that employ voice channels, SMS messaging and data channels via smart devices or IPD's.

More information is available at www.authentify.com, and a copy of Mr. Rolfe's presentation can be obtained by contacting Authentify at info@authentify.com.

About Authentify, Inc.

Authentify, Inc. is a leading global provider of telephone-based Out-of-Band (OOB) authentication services. With a client list that includes five of the world's top ten banks, three of the five largest ecommerce websites and two of the top four insurance companies in North America, Authentify has the most experience and expertise in deploying OOB solutions in the industry. These multi-factor authentication (MFA) services enable organizations that need strong security to quickly and cost-effectively add two-factor or multi-factor authentication layers to user logons, transaction verifications or critical changes such as adding an ACH payee, resetting passwords or changing contact information. The company's patented technology employs a service-oriented message architecture and XML API to seamlessly integrate into existing security processes. Authentify markets primarily to financial services firms that need to protect their clients' online accounts, corporate security professionals managing access control, and emerchants who want to limit fraud on their sites.

For more information, visit Authentify at: www.authentify.com.

Authentify is protected by numerous granted and pending U.S. and International patents including U.S. PATENT NOS. 6,934,858 / 7,383,572 / 7,461,258 / 7,574,733.

This news release was distributed by GlobeNewswire, www.globenewswire.com SOURCE: Authentify CONTACT: Deb Montner, Montner & Associates 203-226-9290 dmontner@montner.com

[ Back To SIP Trunking Home's Homepage ]

Loading
Subscribe here for your FREE
SIP TRUNKING enewslettter.

Featured Partner


Featured Whitepapers

SIP Security for the Enterprise
Voice over IP (VoIP) is incorporated into a variety of computer networks, both public and private, and used for everyday transactions and communications among carriers, businesses, government agencies...

Making A Broadband Purchase Decision
Businesses today have many options for broadband connectivity. Clarifying your particular business needs prior to selecting a broadband provider will ensure an optimal match of broadband service to your requirements.

Voice-Optimized Network Delivers Premier Call Experience
Customers equate call quality with business quality. Real-time communication, interpersonal interaction, and the cordial tone of a call center representative can create a positive impression of your business that no email can match.

Featured Case Studies

Business Telecom Expenses Reduced 50%
A small to medium sized company in the midwest was interested in migrating to IP Communications, but in today's economy, they were hesitant to upgrade their communication system due to their perception that the cost would outweigh the benefits.

Multi-State Company Cuts Telecom Costs 50%
A multi-site, multi-state company with extensive monthly long distance fees and toll-free charges did not have adequate broadband for Broadvox SIP Trunking requirements, nor did they have a SIP enabled telephone system.

Discover Leisure Connects Remote Users to its IP-PBX
Discover Leisure is one of the largest resellers of caravans and motor homes in the UK. With 15 branch of?ces all over the country, the company spent a great deal of money every month just on internal phone calls.

Featured eBOOKS

Internet+: The Way Toward Global Unified Communication
Connecting the telephony of the enterprise PBX or Unified Communications (UC) system using SIP trunks instead of conventional telephone lines has been very successful in recent years.

What is SIP Trunking? Edition 2
SIP trunking is becoming more of a focus for service providers. One key issue many service providers face when deploying SIP trunks is NAT, or Network Address Translation, traversal.

What is SIP Trunking? Edition 1
A vast resource for information about all things SIP - including SIP, security, VoIP, SIP trunking and Unified Communications.

Featured Videos

Broadvox VAR Testimonial VAR 1:
Part 1 of the VAR (Value Added Reseller) Partner Program Testimonials for Broadvox...

E-SBCs AS The Demarcation Point:
Ingate's Steve Johnson talks to Erik Linask about the role session border controller plays as the demarcation point at...

Demystifying DPI
How can deep packet inspection protect your SIP traffic as well as your entire network?

Featured Resources

Partner Program Overview:
Over 4,000 VARs, Master Agents, Solution Providers, and Independent IT Professionals trust Broadvox. We offer customized services and solutions to fit seamlessly into any company's business model. And when you partner with Broadvox, every member of our team stands behind you and your customers 100%...

SIP Trunk UC Summit

What's New

Presenting the New Ingate/Intertex Website:
Internet+ is an extended Internet access allowing high quality SIP (Session Initiation Protocol) based real-time person-to-person communication, everywhere and for any application. It applies to both fixed and mobile networks ...

Featured Blogs

Featured Webinars

Secure SIP Trunking:
What You Need to Know

Successfully Deploying Enterprise SIP Trunking:
Tools and Techniques for Overcoming Common Roadblocks

Featured Podcasts

Getting the Most Out of Your SIP Trunks:
Ingate's Steve Johnson and TMC's Erik Linask discuss how best practices forgetting the most out of SIP Trunking services and common pitfalls to avoid.

Featured Datasheets

Ingate SIParator E-SBCs
Adopting SIP is a simple process with the Ingate SIParator, the secure enterprise session border controller (E-SBC). The SIParator makes secure SIP communications - including VoIP,SIP trunking and more - possible while working seamlessly with your existing network firewall.

Ingate Firewalls
Everyone is talking about enterprise usage of VoIP, instant messaging and other types of realtime communications including presence and conferencing.

SIP Trunk Solutions for Service Providers
The award-winning Ingate Firewall and Ingate SIParator deliver a high quality, reliable SIP trunk connection between the customer's IP-PBX and the service provider network, and solve interoperability issues to simplify deployments and support for remote diagnosis of reported issues.