Integrating Identity and Fraud
summary
Organizational experience shows one in five login attempts is an account takeover attempt, industry traffic contains 35–40% spam, and fake registrations jump ~85% year over year; fraud tools named include Sentry MBA, OpenBullet, SMS Ranger, Genesis Marketplace and Evil Proxy that automate credential stuffing, SMS hijack and device spoofing. Passwordless is useful but not a silver bullet: deploy passive signals (IP, device fingerprinting, behavioral biometrics), split identifier and credential screens to enable discovery, and provide backups and measurable milestones rather than a single universal method.
AI-written summary · about
chapters (6)
- 0:00Introduction and speaker intro
- 1:08Why implement passwordless
- 6:05How fraudsters operate today
- 14:35Choosing passwordless methods
- 19:12Passive authentication strategies
- 25:36Recap and call to action
related talks
29mBecoming You: A Glimpse Into Credential Abuse
41mThe State Of Credential Stuffing And The Future Of Account Takeovers
16mMost Effective Tactics to Combat Account and Platform Fraud
44mThe Unpatchables: Credential Stuffing Quantification and Classification
31mLog In Through the Front Door: Automating Defense Against...
45mApplying Past Lessons for Intel-Driven Identity Threat Detection
40mWeb Attacks and Fraud: Lessons Learned from the Deep End of the Pool
49mBeyond Takeover: Attacker’s in. Now what?