Why CIAM Deviates
summary
CIAM has higher signal entropy, an adjustable attack surface and attacks that are loud and long: observed fraudulent registrations rise from 15% to 24% year‑over‑year, one crypto exchange had bots drain a promotional wallet repeatedly, and one financial service saw 5–10× malicious traffic every day for two months. Simple CAPTCHAs cut credential stuffing but attackers switched to refresh‑token replay. Practical defenses shown are rate limits and allowlists, and moving to unfishable auth like passkeys via OpenID for seamless developer and user rollout.
AI-written summary · about
chapters (11)
- 0:00Introduction to CIAM
- 1:08Why CIAM differs from workforce
- 3:58Signal entropy in CIAM
- 5:43Adjustable attack surface
- 7:31Fraudulent registrations explained
- 12:07Attack patterns by industry
- 13:54Credential stuffing attacks
- 16:41Credential stuffing by sector
- 19:30Countermeasures and defenses
- 21:17Passkeys demo and benefits
- 23:50Resources and closing
related talks
29mBecoming You: A Glimpse Into Credential Abuse
44mThe Unpatchables: Credential Stuffing Quantification and Classification
49mThe Death of Conventional MFA: How AiTM Attacks Are Changing the Game
40mWeb Attacks and Fraud: Lessons Learned from the Deep End of the Pool
41mThe State Of Credential Stuffing And The Future Of Account Takeovers
41m📙 The Great Credential Caper: How to Perform and then Defend Against the (Nearly Impossible) to Defend 🏗️
40mYou have a security problem - your users
27mCommon Application Security Mistakes that Enable Automated Attacks