Posted by:
admin
13 years, 6 months ago
We've recently partnered with VM Racks, Inc a secure virtual hosting specialist for their HIPAA-compliant ESX VMware Hosting service. There are three take-aways from this news:
1. Cloud services need two-factor authentication. This could be for everyone - even consumers (think how much more you would have liked Mint.com if it used two-factor authentication) or just for administrators. Taylor Banks drove this home in his NAISG Atlanta presentation on Cloud Security.
2. Compliance raises the bar for IT and that makes outsourcing make even more sense. In some scenarios HIPAA-compliance may require man-traps, biometric readers and visitor escorts. If you in-house data center does not these items will be more cost-effective to outsource them or to add them internally?
3. WiKID has some particularly strong capabilities that are attractive to "cloud" providers (whatever the *aas).
- WiKID's multi-domain capability means you can have one WiKID domain for your administrators and one for your customers - or one per customer.
- WiKID's flexible licensing means you can start slow and grow.
- WiKID's API has built-in support for multi-tenancy and code examples in python, ruby, java, c# and PHP. With the wAuth API cloud providers can create a simple application that will allow customers to manage their own- and only their own - users - drastically reducing support costs.
- The WiKID API will also allow users to be added programmatically based on any trusted credentials the cloud providers chooses.
- WiKID's mutual https authentication will validate the SSL certificate for the user and will present an error if there is a MiTM attack occurring. This feature greatly increases the security of cloud services.
- WiKID's token clients can be embedded in your application, including on wireless platforms such as the iPhone, Android, J2ME, Blackberry and Windows mobile.
We expect to see more partnerships with cloud providers in the future.
Share on Twitter Share on FacebookRecent Posts
- The latest WiKID version includes an SBOM
- WiKID 6 is released!
- Log4j CVE-2021-44228
- Questions about 2FA for AD admins
- WiKID Android tokens had their data deleted over the weekend by Google Chrome bug
Archive
2024
- January (1)
2022
- December (1)
2021
2019
2018
2017
2016
2015
2014
- December (2)
- November (3)
- October (3)
- September (5)
- August (4)
- July (5)
- June (5)
- May (2)
- April (2)
- March (2)
- February (3)
- January (1)
2013
2012
- December (1)
- November (1)
- October (5)
- September (1)
- August (1)
- June (2)
- May (2)
- April (1)
- March (2)
- February (3)
- January (1)
2011
2010
- December (2)
- November (3)
- October (3)
- September (4)
- August (1)
- July (1)
- June (3)
- May (3)
- April (1)
- March (1)
- February (6)
- January (3)
2009
- December (4)
- November (1)
- October (3)
- September (3)
- August (2)
- July (5)
- June (6)
- May (8)
- April (7)
- March (6)
- February (4)
- January (427)
2008
- December (1)
Categories
- PCI-DSS (2)
- Two-factor authentication (3)
Tags
- wireless-cellular-mobile-devices (7)
- Two-factor authentication (10)
- Wireless, cellular, mobile devices (6)
- NPS (1)
- Phishing and Fraud (111)
- Active Directory (1)
- pam-radius (3)
- privileged access (2)
- Cloud Security (10)
- Mutual Authentication (60)
- Web Application Authentication (1)
- Authentication Attacks (99)
- pci (50)
- Security and Economics (97)
- WiKID (133)
- pam (2)
- VPN (1)
- Installation (2)
- RADIUS Server (1)
- Open Source (64)
- Tutorial (2)
- Strong Authentication (35)
- Information Security (137)
- Transaction Authentication (13)
- Miscellaneous (100)
- Linux (2)
- transaction-authentication (6)
- Two Factor Authentication (254)