DEF CON 15 - Brendan OConnor - Greater than 1
263 views · Published 5 February 2014 · 54:37 · Indexed 2 October 2026
Channel: DEFCONConference · 2014 · Science & Technology
Brendan O'connor: Greater than 1: Defeating "strong" Authentication in Web Applications With Phishing, Fraud, and Identity Theft at peak levels, banks, credit unions, credit card companies, and other financial institutions are enhancing the security of their website authentication. This talk will cover the new methods of authentication, such as mutual authentication, device fingerprinting, out of band authentication, one time passwords, and knowledge base archives. We will analyze how these controls are intended to function, what they're really doing, and how we can defeat them. We will also evaluate the effectiveness of specific technologies based on their stated purpose: stopping phishing, fraud, and identity theft. Brendan O'Connor is a security engineer from the Midwest. He worked in security for a communications company for four years before switching to the financial sector in 2004. Brendan currently works as a Security Engineer for a financial services company, where his duties include vulnerability research, security architecture, and application security. He has several multi-letter acronyms after his name, drinks too much coffee, and plays an unhealthy amount of Warcraft.
More from this channel
-
7:53
DEF CON 20 Documentary Bonus Clips - CDC muxed
-
47:43
DEF CON 20 - Raphael Mudge - Cortana: Rise of the Automated Red Team
-
43:15
DEF CON 20 - Peter Hannay - Exchanging Demands
-
49:37
DEF CON 20 - Richard Thieme - Twenty Years Back Twenty Years Ahead
-
25:01
DEF CON 20 - Ryan Holeman - Passive Bluetooth Monitoring in Scapy
-
48:14
DEF CON 20 - Xeno Kovah and Corey Kallenberg - No More Hooks
-
43:51
DEF CON 20 - Wesley McGrew - SCADA HMI and Microsoft Bob
-
51:04
DEF CON 20 - Panel - The Making of DEF CON 20