rdf-syntax-grammar
mods:
  schema location: http://www.loc.gov/mods/v3 http://www.loc.gov/standards/mods/v3/mods-3-2.xsd
  title info:
    title: Hacking multifactor authentication
  name:
    name part: Grimes, Roger A.
    role:
      role term: creator
    role:
      role term: author.
  type of resource: text
  origin info:
    place:
      place term: inu
    date issued: 2021
    issuance: monographic
  language:
    language term: eng
  physical description:
    form: remote
    extent: 1 online resource (xxxi, 542 pages) : illustrations
  abstract: "Multi-Factor Authentication (MFA) is spreading like wildfire across digital environments. However, hundreds of millions of dollars have been stolen from MFA-protected online accounts. How? Most people who use multifactor authentication (MFA) have been told that it is far less hackable than other types of authentication, or even that it is unhackable. You might be shocked to learn that all MFA solutions are actually easy to hack. That's right: there is no perfectly safe MFA solution. In fact, most can be hacked at least five different ways. Hacking Multifactor Authentication will show you how MFA works behind the scenes and how poorly linked multi-step authentication steps allows MFA to be hacked and compromised. This book covers over two dozen ways that various MFA solutions can be hacked, including the methods (and defenses) common to all MFA solutions. You'll learn about the various types of MFA solutions, their strengthens and weaknesses, and how to pick the best, most defensible MFA solution for your (or your customers') needs. Finally, this book reveals a simple method for quickly evaluating your existing MFA solutions. If using or developing a secure MFA solution is important to you, you need this book."
  table of contents: Introduction -- Who This Book Is For -- What Is Covered in This Book? -- MFA Is Good -- How to Contact Wiley or the Author -- Part I Introduction -- Chapter 1 Logon Problems -- It's Bad Out There -- The Problem with Passwords -- Password Basics -- Identity -- The Password -- Password Registration -- Password Complexity -- Password Storage -- Password Authentication -- Password Policies -- Passwords Will Be with Us for a While -- Password Problems and Attacks -- Password Guessing
  table of contents: Password Hash Cracking -- Password Stealing -- Passwords in Plain View -- Just Ask for It -- Password Hacking Defenses -- MFA Riding to the Rescue? -- Summary -- Chapter 2 Authentication Basics -- Authentication Life Cycle -- Identity -- Authentication -- Authorization -- Accounting/Auditing -- Standards -- Laws of Identity -- Authentication Problems in the Real World -- Summary -- Chapter 3 Types of Authentication -- Personal Recognition -- Knowledge-Based Authentication -- Passwords -- PINS -- Solving Puzzles -- Password Managers -- Single Sign-Ons and Proxies -- Cryptography -- Encryption
  table of contents: Public Key Infrastructure -- Hashing -- Hardware Tokens -- One-Time Password Devices -- Physical Connection Devices -- Wireless -- Phone-Based -- Voice Authentication -- Phone Apps -- SMS -- Biometrics -- FIDO -- Federated Identities and APIs -- OAuth -- APIs -- Contextual/Adaptive -- Less Popular Methods -- Voiceover Radio -- Paper-Based -- Summary -- Chapter 4 Usability vs. Security -- What Does Usability Mean? -- We Don't Really Want the Best Security -- Security Isn't Usually Binary -- Too Secure -- Seven-Factor MFA -- Moving ATM Keypad Numbers -- Not as Worried as You Think About Hacking
  table of contents: Unhackable Fallacy -- Unbreakable Oracle -- DJB -- Unhackable Quantum Cryptography -- We Are Reactive Sheep -- Security Theater -- Security by Obscurity -- MFA Will Cause Slowdowns -- MFA Will Cause Downtime -- No MFA Solution Works Everywhere -- Summary -- Part II Hacking MFA -- Chapter 5 Hacking MFA in General -- MFA Dependency Components -- Enrollment -- User -- Devices/Hardware -- Software -- API -- Authentication Factors -- Authentication Secrets Store -- Cryptography -- Technology -- Transmission/Network Channel -- Namespace -- Supporting Infrastructure -- Relying Party
  table of contents: Federation/Proxies -- Alternate Authentication Methods/Recovery -- Migrations -- Deprovision -- MFA Component Conclusion -- Main Hacking Methods -- Technical Attacks -- Human Element -- Physical -- Two or More Hacking Methods Used -- "You Didn't Hack the MFA!" -- How MFA Vulnerabilities Are Found -- Threat Modeling -- Code Review -- Fuzz Testing -- Penetration Testing -- Vulnerability Scanning -- Human Testing -- Accidents -- Summary -- Chapter 6 Access Control Token Tricks -- Access Token Basics -- Access Control Token General Hacks -- Token Reproduction/Guessing -- Token Theft
  note: Roger A. Grimes.
  note: Includes index.
  subject:
    topic: Hacking
  subject:
    topic: Hackers
  subject:
    topic: Cryptography
  subject:
    topic: Computers
    topic: Access control
    topic: Testing
  subject:
    topic: Computer networks
    topic: Security measures
  subject:
    topic: Computer security
  subject:
    topic: Computer Security
  subject:
    topic: Piratage informatique
  subject:
    topic: Pirates informatiques
  subject:
    topic: Cryptographie
  subject:
    topic: Réseaux d'ordinateurs
    topic: Sécurité
    topic: Mesures
  subject:
    topic: Sécurité informatique
  subject:
    topic: Computer networks
    topic: Security measures
  subject:
    topic: Computer security
  subject:
    topic: Computers
    topic: Access control
    topic: Testing
  subject:
    topic: Cryptography
  subject:
    topic: Hackers
  subject:
    topic: Hacking
  classification: QA76.9.A25 G75 2021
  classification: 005.8
  related item:
    title info:
      title: Hacking multifactor authentication
    name:
      name part: Grimes, Roger A.
    origin info:
      publisher: Indianapolis, IN : John Wiley & Sons, Inc., [2021]
    identifier: (OCoLC)1119761240
  identifier: 9781119672357
  identifier: 111967235X
  identifier: 9781119672340
  identifier: 1119672341
  identifier: 9781119650805
  identifier: 1119650801
  identifier: 1119650798
  identifier: 9781119650799
  identifier: F94E0825-B214-4259-8F76-4A4E6FB0546C OverDrive, Inc.
  identifier: 9820872 IEEE
  identifier: 9781119650799 O'Reilly Media
  identifier: https://proxy.library.tamu.edu/login
  record info:
    record content source: YDX
    record creation date: 200929
    record change date: 20260129231156.8
    record identifier: in00004669162
    language of cataloging:
      language term: eng