{"id":7040,"date":"2020-11-17T16:24:22","date_gmt":"2020-11-17T16:24:22","guid":{"rendered":"https:\/\/outofsite.biz\/cynance\/?p=7040"},"modified":"2021-03-10T08:53:05","modified_gmt":"2021-03-10T08:53:05","slug":"secure-passwords-dont-protect-network-security","status":"publish","type":"post","link":"https:\/\/outofsite.biz\/cynance\/secure-passwords-dont-protect-network-security\/","title":{"rendered":"Pa$$W0rD123: Why secure passwords alone aren\u2019t enough to protect your network security"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"7040\" class=\"elementor elementor-7040\">\n\t\t\t\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-45e0897e elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"45e0897e\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2a13f229\" data-id=\"2a13f229\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-264884f6 elementor-widget elementor-widget-text-editor\" data-id=\"264884f6\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.11.5 - 14-03-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#818a91;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#818a91;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">You probably use hundreds of different applications and programs to carry out every day tasks. Each one of these applications present some level of risk to your network security, and as result every employee is required to set secure passwords to verify their access to them, from logging on to their computers, to opening their email accounts.&nbsp;<\/span><\/p>\n<p style=\"font-weight: 400;\">\n<\/p><p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">However, even secure passwords are no longer considered best practice network security. In 2019, Alex Weinert, The Director of Identity Security at Microsoft announced that <\/span><a href=\"https:\/\/techcommunity.microsoft.com\/t5\/azure-active-directory-identity\/your-pa-word-doesn-t-matter\/ba-p\/731984\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">pa$$words don\u2019t matter<\/span><\/a><span style=\"font-weight: 400;\">, and advised that access to all systems should be backed up by a form of multi factor authentication (MFA). He argued that accounts using multi factor authentication as well as passwords are 99.9% less likely to be compromised. And now he has <\/span><a href=\"https:\/\/techcommunity.microsoft.com\/t5\/azure-active-directory-identity\/it-s-time-to-hang-up-on-phone-transports-for-authentication\/ba-p\/1751752\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">moved the MFA agenda forward<\/span><\/a><span style=\"font-weight: 400;\"> again by saying that while any form of MFA is better than no MFA, SMS and voice call based MFA should be avoided at all costs.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">Why secure passwords don\u2019t matter for network security<\/span><\/h2>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Secure passwords have long been accepted as the standard form of protection for all online accounts, and an integral part of all network security practices. However they can be easily compromised, usually by some form of human error, whether from within an organisation, or outside of it.<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Hackers have endless tools at their disposal to discover passwords, but often users make it easy for them to obtain and use them. Just some of the insecure password practices in circulation include:<\/span><\/p>\n<ul style=\"font-weight: 400;\">\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Not changing the default password on systems and applications<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Setting very simple passwords such as \u2018password\u2019 or \u2018123456\u2019 (don\u2019t believe us &#8211; <\/span><a href=\"https:\/\/www.forbes.com\/sites\/daveywinder\/2019\/12\/14\/ranked-the-worlds-100-worst-passwords\/?sh=781cd84e69b4\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">check this out<\/span><\/a><span style=\"font-weight: 400;\">!)<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Reusing passwords across different accounts<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Keeping the same password for months or even years without changing it<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Writing down passwords on pieces of paper<\/span><\/li>\n<\/ul>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">All of these and more allow hackers to easily break into accounts.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">Multi factor authentication &#8211; the present and future of network security<\/span><\/h2>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">In response to these insecurities, many companies use multi factor authentication to verify user accounts and protect their network security. Multi factor authentication (also known as two-step verification) requires a second form of identification, usually in the form of a temporary code. One of the greatest benefits of multi factor authentication is that it is an accessible and inexpensive way to bump up user account security. But not all forms of MFA are created equal.&nbsp;<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">The most commonly used forms of multi factor authentication are SMS or phone calls over the mobile phone network. This is an easy way to get MFA buy-in, but it is also the most insecure format of multi factor authentication. SMS and voice calls rely on mobile phone networks for delivery to users. These networks are not encrypted, making it possible to intercept them en route. In addition, if mobile network coverage is patchy, they may never get there at all. This form of authentication can also be compromised by attacks on the publicly switched telephone networks and their staff, which give malicious actors access to the channels.&nbsp;<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">The alternative to phone based multi factor authentication is to use purpose built app-based authenticators. These authenticator apps are encrypted, meaning that even if they are compromised, the attacker will not be able to access the code. Authenticator apps generate codes on the device only, limiting the chances of them being compromised. And because they are mobile phone based, they can also use biometrics in order to access them in the first place. In short, they increase user security immensely.<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Other forms of multi-factor authentication can include biometrics such as requiring a fingerprint scan in order to open an app or turn on a computer.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">Maximising your network security<\/span><\/h2>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Ensuring your <\/span><a href=\"https:\/\/outofsite.biz\/cynance\/infrastructure-security\/network-security\/\"><span style=\"font-weight: 400;\">network is properly secured<\/span><\/a><span style=\"font-weight: 400;\"> requires a combination of a strong password policy, clear access control policies (including multi factor authentication), and a comprehensive network security policy incorporating good technological controls to reduce reliance on individual users setting passwords in order to secure networks.<\/span><\/p>\n<p style=\"font-weight: 400;\"><b>Utilise technology to protect your network security:<\/b><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Implement perimeter and event monitoring that will detect and alert for unusual behaviour, including multiple attempts to enter a password, log in attempts from unexpected locations, and alerts when MFA is incorrect. Once detected, systems can be disconnected to prevent the attack from escalating or being successful.<\/span><\/p>\n<p style=\"font-weight: 400;\"><b>Create strong access control policies<\/b><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">The more people who have access to a system, the higher the risk of compromise. An access control policy will ensure that guidelines are set for who accesses which systems, and also for ensuring that the accounts of employees who have left the organisation are closed to avoid them being compromised.<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">The principle of least privilege should be utilised to identify the systems that each individual needs to access in order to do their job, and only give them access to those systems.<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Encourage secure passwords to improve protection against attack. The elements of a strong password policy include requiring users to change from default passwords, encouraging them to update it regularly (although not too often), information and advice about how to set secure passwords, banning simple passwords and more. And of course, implementing multi factor authentication.<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Use other forms of authentication including biometric authentication using fingerprint, voice, or face recognition. These are stored on devices, making them impossible to crack.<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Whatever you do, ensure that your network security is not compromised by human error alone, because at the end of the day, your pa$$word doesn\u2019t matter.<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Stay safe<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Almost every account we use on a day to day basis is protected by a password, but secure passwords alone are not enough to keep your networks safe.<\/p>\n","protected":false},"author":10,"featured_media":7045,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19],"tags":[63,62],"_links":{"self":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts\/7040"}],"collection":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/comments?post=7040"}],"version-history":[{"count":0,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts\/7040\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/media\/7045"}],"wp:attachment":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/media?parent=7040"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/categories?post=7040"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/tags?post=7040"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}