Skip to main content
2023 Security Congress Main banner
 
Icon Legend
Additional Fee Required
Additional Fee Required
Pre-Registration Required
Pre-Registration Required
Online & Virtual
Online & Virtual
Onsite Only
Onsite Only
Earn CPE Credits
Earn CPE Credits
Livestreamed Session
Livestreamed Session
Included in Guest Pass
Included in Guest Pass
Invite Only
Invite Only
Session Recorded
Session Recorded
Student Experience
Student Experience
Back

Onsite and Virtual

Cyber Leadership

Killing Me Too Softly: Why Won’t Passwords Die?

Wednesday, October 25, 2023
3:05pm – 4:00pm CT
Location: Presidential Ballroom D
CPE Credits 1
Online & Virtual Earn CPE Credits Livestreamed Session Session Recorded
Decades into our lament of weak passwords, it’s been six years since NIST 800-63B formally published why “best-practice” password policies are bogus. Yet, here we still are, calculating how strong passwords are, and warning people against choosing passwords like “Summer2023.” What must we do to leave the password swamp behind? Why are we stuck? Thanks to bold moves by technology firms, we rallied as an industry to kill off SSLv3 and TLS 1.0. Now what must we do to kill off single-factor authentication?

Learning Objectives:

  • Identify gaps in the organization that are preventing retirement of technical debt.
  • Recognize force levers for effecting change in the organization, enabling the retirement of single-factor authentication systems.
  • Communicate the business case for retirement of broken authentication systems.