2019-025-Ben Johnson discusses identity rights management, and controlling your AuthN/AuthZ issues
Published July 2, 2019
41 min
    Add to queue
    Copy URL
    Show notes

    Identity analytics


    “Identity analytics is the next evolution of the IGA (Identity Governance & Administration) market. Identity professionals can use this emerging set of solutions combining big data and advanced analytics to increase identity-related risk awareness and enhance IAM processes such as access certification, access request and role management.” --gartner

    Identity related risk awareness

    Access certification is the process of validating access rights within systems. ... With access certification, organizations and regulations aim to formally validate users within systems and ensure their access rights are appropriate.


    Access request - a system must validate that a user has need-to-know

    Role management - users must be validated in a particular role or roles (admin, superuser, backup controller, launch manager, code committer)

    What kind of threats are you protecting against?

    What do you solve that proper administration of users can do?

    How does technology like this improve IAM processes? 

    If it gathers heuristics, what happens when a user changes? (loses an arm, finger, or sneezes during password login, or just ages?)


    Where is the best fit for these kinds of systems? 

    Where should you put these systems if you’re in a blended environment? And how does this work with systems like Active Directory?

    Privacy issues… what if any do you have to deal with in this case? 

    That was my next question

    Entitlements? What’s the difference between AuthN?

    Identity creep -Ben gave a talk on it  https://www.brighttalk.com/webcast/17685/362274

    Does this monitor, or will it also prevent? 

    If it doesn’t, can it send alerts to you IPS to isolate?

    “Blast radius”



    Check out our Store on Teepub! https://brakesec.com/store

    Join us on our #Slack Channel! Send a request to @brakesec on Twitter or email bds.podcast@gmail.com

    #Brakesec Store!:https://www.teepublic.com/user/bdspodcast



    #Youtube Channel:  http://www.youtube.com/c/BDSPodcast

    #iTunes Store Link: https://brakesec.com/BDSiTunes

    #Google Play Store: https://brakesec.com/BDS-GooglePlay

    Our main site:  https://brakesec.com/bdswebsite

    #iHeartRadio App:  https://brakesec.com/iHeartBrakesec


    Comments, Questions, Feedback: bds.podcast@gmail.com

    Support Brakeing Down Security Podcast by using our #Paypalhttps://brakesec.com/PaypalBDS OR our #Patreon


    #Twitter@brakesec @boettcherpwned @bryanbrake @infosystir

    #Player.FM : https://brakesec.com/BDS-PlayerFM

    #Stitcher Network: https://brakesec.com/BrakeSecStitcher

    #TuneIn Radio App: https://brakesec.com/TuneInBrakesec

        0:00:00 / 0:00:00