2022年12月5日

向无密码访问的缓慢转变社区聊天网络会议图书馆向无密码访问的缓慢转变一项对500名DevOps和安全专业人员的调查表明，从传统的身份验证技术转向采用无密码方法来实现网络安全将需要大量的时间和耐心。这项由市场研究公司施莱辛格集团(Schlesinger Group)代表Teleport进行的调查发现，87%的受访者积极倾向于采用某种无密码方式来管理访问权限。例如，超过四分之三(78%)的受访者积极主动地转向生物识别认证，超过一半(55%)的受访者已经在他们的系统中使用生物识别技术。然而，加密技术的整体采用率仍然相对较低，80%的受访者表示，他们的组织仍然使用密码作为安全方法。超过一半(57%)的受访者还表示，他们的组织实施了新的安全方法，但未能被员工采用。62%的受访者特别指出，隐私问题是他们在采用生物识别技术时面临的最大挑战。Teleport的首席营销官迈克尔·弗兰蒂(Michael Ferranti)说，任何对访问管理的成功改变都必须比密码更方便。今天大多数组织遇到的问题是用于验证身份的方法太复杂了。相比之下，Teleport Access Plane使以编程方式颁发证书成为可能，并为管理所有用户、基础设施资源和自定义应用程序的身份提供了一个真实的单一来源。例如，不到四分之一(24%)的受访者表示，他们百分之百确信前员工不再能够访问前公司运营的IT基础设施。 Nearly half of the organizations surveyed are less than 50% confident that former employees no longer have access to infrastructure, the survey found. A full 60% of respondents are concerned about employees leaving the organization with secrets and knowledge about how to access infrastructure. In theory, passwordless approaches to security should alleviate those concerns. However, IT teams now find themselves using 5.7 different tools, on average, to manage access policies; as a result, access management is becoming more rather than less complex. Almost all (94%) respondents strongly agree or somewhat agree that this automation is critical for streamlining compliance costs. Overall, 85% of respondents said their organization increased security spending within the last 12 months. The shift toward zero-trust IT architectures has become a major driver of that spending. As defined by the National Institute of Standards and Technology (NIST), zero-trust IT is an “evolving set of cybersecurity paradigms that move defenses from static, network-based perimeters to focus on users, assets and resources.” As such, no implicit trust is granted to assets or users based solely on their physical or network location or asset ownership. Most cybersecurity professionals realize that’s not necessarily a new idea. Forrester Research analyst John Kindervag is credited with popularizing the term in 2010, but the concept itself can be traced back as far as 2004. The fundamental shift that is occurring today is rather than relying on hardware to achieve that goal, it’s employing software to lock down the IT environment. Recent Articles By Author