Implementing Two Factor Authentication For Remote Access Using Phone Factor

Implementing Two-Factor Authentication for Remote Access using PhoneFactorA Proof-of-Concept Experiment for an Accountancy Firm (AF)

Michael G. Kaishar, MSIA | CISSP | Security+Sr. Information Security Architect & Consultant

A Master of Science Research Practicum Presentation

Graduate School of ManagementUniversity of Dallas

Partial Fulfillment of the Requirementsfor the Master of Science Degree

in Information Assurance

Saturday, March 27, 2010

Saturday, March 27, 2010 Michael G. Kaishar 2

INTRODUCTION Michael G. Kaishar Practicum Study

An Experiment for an Accountancy Firm (AF) Implementing Two-Factor Authentication for

Remote Access using PhoneFactor Significance

Feasible Address issue of unauthorized access

MATERIALS Hardware

Dell Laptop with sufficient resources Cell Phone

Software & Service Operating Systems (XP and W2K3 Server) VMware & 2X Remote Access Server PhoneFactor Two-Factor Authentication Internet Connectivity

ANALYSIS Built Test Environment using VMware

Simulated AF’s production infrastructureWithout PhoneFactorWith PhoneFactor

Figure 1. Illustration of remote connectivity process Figure 2. VMWare Inc. Illustration of where virtual machines reside in reference to the Dell Laptop Hardware Layer

VIDEO DEMONSTRATION 1 Current Procedures for Connectivity

Username Password

VIDEO DEMONSTRATION 2 Proposed Solution for Connectivity

Username Password Two-Factor Authentication using PhoneFactor

VIDEO DEMONSTRATION 3 Failed Attempt for Connectivity

Username Password PhoneFactor

RESULTS PhoneFactor worked as advertised Easy to install, configure, and manage Easy to integrate into existing system Required little to no downtime AF is very pleased with outcome Cost Effective (free for up to 25 users)

CONCLUSIONS Recommendations

Augment security strategy Separate systems for each function Balance between security and functionality

Limitations Isolated (Sand-boxed) Virtualized Environment Single client (lack of system load)

CONCLUSIONS Future Work

Voice recognition Text-based authentication (SMS)

Questions?

Thank You

Implementing Two Factor Authentication For Remote Access Using Phone Factor

Documents

Implementing Two Factor Authentication Using Phone Factor

Multi Factor Authentication (MFA)

Two-Factor Authentication: Selecting and …maguire/DEGREE-PROJECT-REPORTS/...Two-Factor Authentication Selecting and implementing a two-factor authentication method for a Digital

“Evaluate the strength of online authentication methods”delaat/rp/2007... · Multifactor authentication • One-Factor Authentication • Two-Factor Authentication ... • Graphical

Multi-factor authentication from a leading …...Multi-factor authentication (MFA), also known as two-factor authentication (2FA), is an authentication method which requires two independent

Attacking Your Two-Factor Authentication€¦ · What is Two-Factor Authentication? Two-Factor Authentication (2FA) is a second method of authentication, usually accompanying logging

Cyber - Implementing Multi-Factor Authentication · Web viewMulti-factor authentication is one of the most effective controls an organisation can implement to prevent an adversary

Multi-Factor Authentication Wireless (Wi-Fi) Authentication...Multi-Factor Authentication Platform & OTP, QR One Factor Authentication is not good enough for your security control

2 factor authentication presentation

A Method of Risk Assessment for Multi-Factor Authentication€¦ · A Method of Risk Assessment for Multi-Factor Authentication 188 1.1.2 Multi-Factor Authentication Multi-factor

Implementing Network Segmentation and Segregation · user and service authentication and authorisation, including multi-factor authentication and policy-based ... To be successful,

Two factor authentication-in_your_network_e_guide

Two Factor Authentication (2FA) BriefingVTC –Two Factor Authentication (2FA) • 2FA service launched in Nov 2016. VTC –Two Factor Authentication (2FA) No Additional Hardware Cost

Two Factor Authentication (2FA) StoredSafe and Google Authenticator OTP. Two Factor Authentication StoredSafe Overview: Plug compatible to current authentication services Two Factor

What is 2-Factor authentication? - peoria.medicine.uic.edu · implementing two-factor authentication (2FA) for Banner administrative forms for both on and off campus networks. This

MFA Multi-Factor Authentication

Two factor Authentication

Two-Factor Authentication: Selecting and …maguire/.c/DEGREE-PROJECT-REPORTS/...Two-Factor Authentication Selecting and implementing a two-factor authentication method for a Digital

TOTP Two Factor Authentication - APNIC · TOTP Two Factor Authentication Guide for enabling TOTP Two Factor Authentication Page 2 of 6 Enabling TOTP Two Factor Authentication To enable

OTP – SMS Two-Factor Authentication€¦ · OTP – SMS Two-Factor Authentication. TABLE OF CONTENTS • Introduction 3 • OTP – SMS Two-Factor Authentication 5 • Technical