Introduction
RBA enables organizations to address access-related risks and improve user experience. RBA allows you to validate the risk of an access request at the runtime and take appropriate actions such as forcing an advanced authentication or denying access.
Example: An employee tries to log into an access manager portal by using the corporate intranet. He can log in without any additional authentication. However, when the same employee logs into the portal from outside the office, he must provide an x’s certificate as proof for authentication.
Why is RBA more secure than strong passwords?
Very simply, all passwords can be hacked. There are several ways this happens. It could be a brute force attack or dictionary attacks. There are malware keyloggers that can track the keystrokes of users. Additionally, there might be a phishing attempt as well where a user’s account can be compromised.
So, organizations have to get away from the notion of a strong password. Yes, we can add more characters and make it more complex, but they all can be hacked in the end with the current technology.
Thus with RBA, we can gather a comprehensive 360-degree view of a transaction and form a risk score using the intelligence of the risk analytics within the solution. Based on the score of each unique transaction or interaction between the user and the platform one can decide what level of authentication security is required.
Maybe we require an additional OTP, maybe we require just a fingerprint or facial recognition; All of that can be adjusted dynamically to provide a precise level of security.
Benefits of RBA
- Mitigates Risk and improves security: Risk management based on login attempts, login failures, IP address, location, etc. is done before granting access. A risk response strategy can be developed whereby the project team acts to decrease the probability of occurrence or impact of a threat.
- Flexible to risk: The chief information security officer, IT Leads or the management will decide the policies for RBA which manages risks as per their organization’s needs.
How SecurDI can help?
SecurDI is seasoned professionals can help you analyze and decide what RBA works for your organization and whether you even need it. We can also help you implement RBA systems, analyzing which vendor works for you best.
– Authored by Navya Molugu