Critical Infrastructure’s Identity Assurance Is Only as Good as Your Vendor's HR Department
About This Session
When a contractor logs into your network, someone proofed that person. It probably wasn't you. We look back on the gold standard of identity vs authentication, NIST 800-63 Rev. 4, what it means for operators, and why US critical infrastructure remains vulnerable to basic authentication attacks despite a mature market of security tools.
Speaker
Ethan Schmertzler
Co-CEO - Dispel
Ethan Schmertzler is the Co-Chief Executive Officer and co-founder of Dispel. He previously served as the lead front-end engineer at Triple Mint and as a financial analyst at National Security Equity Partners working on early-stage and growth equity technology investments. Ethan graduated cum laude from Middlebury College with a B.A. in psychology. He volunteers as an executive member of Phillips Academy Andover's Alumni Council and with the FBI's critical infrastructure InfraGard program.