7Masters - Two Step Verification
-
Upload
erick-belluci-tedeschi -
Category
Technology
-
view
180 -
download
2
Transcript of 7Masters - Two Step Verification
![Page 1: 7Masters - Two Step Verification](https://reader036.fdocuments.net/reader036/viewer/2022071704/55aca3271a28ab9a1f8b45dc/html5/thumbnails/1.jpg)
Two step verification
Erick Tedeschi
@ericktedeschi
30/01/2013
![Page 2: 7Masters - Two Step Verification](https://reader036.fdocuments.net/reader036/viewer/2022071704/55aca3271a28ab9a1f8b45dc/html5/thumbnails/2.jpg)
O Que é?
• Aquilo que você sabe
• Aquilo que você tem
• Aquilo que você é (biometria)
![Page 3: 7Masters - Two Step Verification](https://reader036.fdocuments.net/reader036/viewer/2022071704/55aca3271a28ab9a1f8b45dc/html5/thumbnails/3.jpg)
O Que é?
• Aquilo que você sabe:
Senha
PIN (Personal Information Number)
Pattern (sequência de células (Android), “Picture Password” (Windows 8))
![Page 4: 7Masters - Two Step Verification](https://reader036.fdocuments.net/reader036/viewer/2022071704/55aca3271a28ab9a1f8b45dc/html5/thumbnails/4.jpg)
O Que é?
• Aquilo que você tem:
Token (Eletrônico ou de papel)
SmartCard (certificado digital)
RFID (crachá, chaveiro)
![Page 5: 7Masters - Two Step Verification](https://reader036.fdocuments.net/reader036/viewer/2022071704/55aca3271a28ab9a1f8b45dc/html5/thumbnails/5.jpg)
O Que é?
• Aquilo que você é:
Fingerprint (impressão digital)
Voiceprint (freqüencia das cordas vocais)
Reconhecimento de Íris (globo ocular)
![Page 6: 7Masters - Two Step Verification](https://reader036.fdocuments.net/reader036/viewer/2022071704/55aca3271a28ab9a1f8b45dc/html5/thumbnails/6.jpg)
Quem usa?
Referências:Gmail (http://www.howtogeek.com/105041/how-to-secure-your-google-account-with-google-authenticator/)Yahoo (http://www.ymailblog.com/blog/2011/12/yahoo-introduces-stronger-user-authentication-%E2%80%93-second-sign-in-verification/)Facebook (https://www.facebook.com/note.php?note_id=10150172618258920)LastPASS (http://www.howtogeek.com/104666/how-to-make-lastpass-even-more-secure-with-google-authenticator/)Amazon AWS (http://aws.amazon.com/mfa/virtual_mfa_applications/?tag=gmgamzn-20)
![Page 7: 7Masters - Two Step Verification](https://reader036.fdocuments.net/reader036/viewer/2022071704/55aca3271a28ab9a1f8b45dc/html5/thumbnails/7.jpg)
Fluxo básico com Google Authenticator /ou SMS Based
sim
não
![Page 8: 7Masters - Two Step Verification](https://reader036.fdocuments.net/reader036/viewer/2022071704/55aca3271a28ab9a1f8b45dc/html5/thumbnails/8.jpg)
Saiba mais:
• https://www.owasp.org/index.php/Authentication_Cheat_Sheet
• https://www.owasp.org/index.php/Forgot_Password_Cheat_Sheet
• http://en.wikipedia.org/wiki/Two-factor_authentication
![Page 9: 7Masters - Two Step Verification](https://reader036.fdocuments.net/reader036/viewer/2022071704/55aca3271a28ab9a1f8b45dc/html5/thumbnails/9.jpg)
Obrigado
Erick Belluci Tedeschi
Site: http://oerick.com
Twitter: http://twitter.com/ericktedeschi
E-mail: [email protected]