Hot authentication tools
The latest in multi-factor authentication schemes
By Julie Sartain | Network World US | Published: 16:45, 08 February 2012
User name and password doesn't cut it anymore in the world of online financial transactions. New federal rules call for multi-factor authentication schemes to combat growing threats. The latest multi-factor measures focus on biometrics, advanced analytics, and out-of-band techniques utilising smartphones.
One serious threat on the horizon is the man-in-the-browser (MITB) attack. In this example,1. Alice requests transfer of $1,000 to Bob.2. MITB alters transfer request to transfer $21,000 to Fred.3. MITB submits fraudulent request to bank.4. Bank requests confirmation of transfer of $21,000 to Fred.5. MITB alters confirmation page to present user with original request.6. Alice reviews the transaction details and confirms request.7. Bank transfers $21,000 to Fred.