Unveiling The Truth – A Case Study on Zero Trust for Consumers
summary
Microsoft defends a billion+ consumer accounts by combining heuristics, ML models and policy engines across five pillars — prevention, containment, detection, investigation, mitigation — and reports stopping 2 million+ compromises/month and identifying 5 million+ attacker-driven sign-ins/month. Examples include crypto‑mining abuse and hard‑to‑detect sleeper accounts. Challenges: unsolvable automated challenges that create large false positives (1% of a billion = a million affected), fragmented service reputations, 20+ small teams coordinating, and the need for metrics councils and diversified, tunable detection levers.
AI-written summary · about
chapters (17)
- 0:00Intro
- 1:03A Billion New Consumer Accounts - Good Right?
- 3:08Fraud Constantly Changes
- 3:57Tight Roping Fraud and Abuse Prevention
- 4:39Dimensions of Fraud and Abuse
- 5:53Fraud vs Abuse - What's the difference?
- 7:005 Pillars of Protection
- 9:30Microsoft's Identity Systems
- 10:30Sign-in and Sign Up
- 11:45Building Consumer Trust AND Verifying Identity
- 12:43Prevention Examples
- 15:40Let the system adapt to attacks
- 16:42Pre- and Post-Detection
- 21:10Leaning Into Metrics and Growth
- 22:50Fighting Fraud and Abuse: A Team Sport
- 25:27A Race Against Attackers
- 28:02Apply What You Have Learned Today
related talks
40mZero Trust and Privacy: Moving Security Closer to the Target
40mZero Trust in a Post-pandemic World
34mZero Trust Best Practices in Government and Federal Industries
19mBeyond Perimeters: Implementing Zero Trust at Enterprise Scale
31mEmbracing Zero Trust When You Aren't the World's Largest Internet Company
31mAttacking Zero Trust Designs in 2021
20mUnderstanding Zero Trust security
18mRedefining Cybersecurity: Harnessing Zero Trust Architecture for a Resilient Future