With a few rare exceptions, most breaches occur because of errors that result in compromised credentials. A Verizon Data breach report concluded that 67% of breaches were aided by significant errors. Eventually one of your users will click a link and fall prey to a man-in-the-middle attack, respond to an email, get duped by a phishing attack, use and easily deduced password, have a lapse in judgment or share their credentials. Good intentions are not enough, everyone makes mistakes.
Since we cannot eliminate the weak link – human fallibility, the only viable solution needs to ensure that errors and omissions do not result in compromised access. The most secure environment is one where it is useless to steal, loan, or copy the credentials. Each and every use of the credentials should be validated for proof that is in genuine, that it offers the same assurance as an in-person physical identification. Real-time authentication is needed that identifies the physical person. In order that authentication uniquely identifies an individual at the moment of login, replay must be immediately rejected, denying access.
Positive identification removes the threat of negligent insiders; those well-meaning employees that pass their credentials to fellow employees, or worse yet, write down the myriad of passwords in a handy place for others to view. Imagine attempting to break into an account where the credentials you have are useless. Keyboard loggers, spyware, malware, phishing, man-in-the-middle, social networking scams, etc… would all be thwarted by requiring positive identification.
Veritrix’s patented Multichannel, Multifactor Authentication is a human identification technology that employs a number of biometrics, speech and communications technologies to verify identity the same way humans do. The Sovay login process is quick and simple.
- Enter username
- Receive a prompt
- Face your webcam and speak