Skip to main content

Praetorian report on Top Attack Vectors points to two-factor auth for remote users and admins

(0 comments)

The report from Praetorian is excellent. Download it.  Some pertinent (to us) bits:

"The top four attack vectors are based on utilizing stolen credentials. This is a serious problem because credential theft will always work as long as the credentials are valid. Credential theft is highly reliable, repeatable, and has a low likelihood of negative impact for an attacker"

In addition to recommending two-factor authentication for remote access, they have a handful of very useful recommendations such as implementing LAPS, encrypting domain passwords in memory, and forcing complex, 15-character domain passwords.  I suspect these are recommended in the spirit of title "How to Dramatically Improve Corporate IT Security without Spending Millions". 

I would argue that implementing two-factor authentication for domain admins would be inexpensive too.  WiKID can replace static passwords in AD for $24 per user per year or less.  A large enterprise might have less than a 100 systems administrators.  WiKID also works on Linux so you can implement two-factor authentication for admins across OSs - as is now required by PCI-DSS.  In addition, it's not just your domain creds that are targeted.  The Synful attack showed how Cisco routers can be targeted.   So, it's great that you can add some security to your Window environment, but don't forget about your Ciscos and Check Point admin creds.

Credential theft continues to be the leading attack vector for infiltration and escalation.  While we are always for doing the best you can with what you have, it is really worth chosing a two-factor authentication solution that can help stop escalation.

If you are going to implement 15-character complex passwords, you might also be interested in our built-in AD password reset capability!

 

 

 

 

 

Currently unrated

Comments

There are currently no comments

New Comment

required

required (not published)

optional

Recent Posts

Archive

2018
2017
2016
2015
2014
2013
2012
2011
2010
2009
2008

Categories

Tags

Authors

Feeds

RSS / Atom