Enemy at the Gate, and Beyond: Detecting and Stopping Account Takeover

Proving Ground, 11:00 Tuesday Account Take-Over is about more than just getting authenticated. Access acquisition has many faces, including for MFA-enabled accounts. Access leverage can have many faces as well, and having authenticated no longer gua...

Proving Ground, 11:00 Tuesday

Account Take-Over is about more than just getting authenticated. Access acquisition has many faces, including for MFA-enabled accounts. Access leverage can have many faces as well, and having authenticated no longer guarantees you’re indeed who you say you are. We present a novel methodology for analyzing IAM and infrastructure access logs for detecting the various attack scenarios.

Yuval Zacharia