CAN STRONG AUTHENTICATION SORT OUT PHISHING AND FRAUD

TL;DRAbstract

Authentication, especially two-factor authentication, is seen as an important step against on-line crime, especially for on-line banking and Internet shopping. But authentication alone is not enough to protect computer users against the efforts of organized crime to thieve their credentials, their data and even their identity. In fact, strong authentication in only one part of a system may even make things worse if users expect to rely entirely on technology to protect them from phishing and related attacks. Organized criminals have realised (precisely because they are organized) that phishing and identity theft can be carried out over an extended period, by piecing together snippets of information from separate attacks for a final sting. For example, logging on using an authentication token will neutralize password stealers, but the very presence of a token authentication request can make an ideal trigger for spyware, especially if its goal is to build up a pattern of your on-line beh

Chat with Paper

AI Agents for this Paper