Hot authentication tools
The latest in multi-factor authentication schemes
By Julie Sartain | Network World US | Published: 16:45, 08 February 2012
User name and password doesn't cut it anymore in the world of online financial transactions. New federal rules call for multi-factor authentication schemes to combat growing threats. The latest multi-factor measures focus on biometrics, advanced analytics, and out-of-band techniques utilising smartphones.
One serious threat on the horizon is the man-in-the-browser (MITB) attack. In this example,
1. Alice requests transfer of $1,000 to Bob.
2. MITB alters transfer request to transfer $21,000 to Fred.
3. MITB submits fraudulent request to bank.
4. Bank requests confirmation of transfer of $21,000 to Fred.
5. MITB alters confirmation page to present user with original request.
6. Alice reviews the transaction details and confirms request.
7. Bank transfers $21,000 to Fred.