Advanced Authentication Framework
summary
Argues conventional MFA with passwords plus OTP is inadequate and recommends moving enterprises through concrete options: password camouflage (SSO/password managers), FIDO passwordless for biometric/device-bound keys, then continuous behavioral scoring layered over passwordless; cites Sentry MBA ~300k download sites and Starbucks showing >90% bot traffic as scale evidence. Claims the “trifecta” business case: higher conversion, account takeover down to ~0.2–0.3%, and multimillion-dollar savings from dismantling password reset; notes attribute-protection and emerging standards like ADI for interoperable single digital IDs.
AI-written summary · about
chapters (4)
related talks
27mSecure Authentication without the Need for Passwords
17mImplementing Multi-factor Authentication
38mAnatomy of the Attack: The Rise and Fall of MFA
50mOne Does Not Simply Add MFA
47mThe Psychology of Multi-Factor Authentication
20mBuilding a Resilient MFA Framework: Strategies and Best Practices
30mGoing Beyond Passwords: The Future of User Authentication
40mPurple Team Auth: Hacking & Bypassing MFA Systems, and How to Armor Up