SecurityCurrent: 10 CISOs Say Passwords are Failing and Must be Augmented or Supplanted

A SecurityCurrent interview around the demise of passwords and a need for a capable password-replacement solution.

Ten CISOs from across industries weigh in on the effectiveness of passwords, with most predicting that the days are numbered for the password as the sole authentication method. They see enterprises moving to augment or supplant the traditional password with advanced technologies, such as biometrics.

John J. Masserini
MIAX Options CSO
Believe it or not, security people hate passwords more than the users do. Passwords are an antiquated technology, but yet are the foundation of every security program in existence.

No matter how much ‘new cool tech’ security executives incorporate into their programs, the reality is, we still rely on a 1960’s technology to provide the most fundamental control in the enterprise.

As an industry, we need to develop a viable solution for user credentials that doesn’t involve lengthy, complex character strings that have to be remembered by the user and get rid of passwords once and for all.

With the continued adoption of Radio-frequency Identification (RFID) and Near Field Communications (NFC), along with the implementation of the fingerprint readers in portable consumer devices, we now have a way to have a fairly high level of confidence that the person logging in is who they say they are.

This ‘something you have and something you are’ model, combined with a solid Adaptive Authentication solution, may finally be the demise of the much-maligned password.

Read the full article here:

Originally posted on SecurityCurrent.com.