Multi-Factor Authentication (MFA)

Multi-factor authentication (MFA) enhances security by requiring multiple forms of verification before granting access. Here are some common MFA methods and their relative security:

1. SMS and Voice Call Codes:

• How it works: A one-time code is sent to your mobile phone via SMS or voice call.
• Security: Convenient but vulnerable to SIM swapping and interception attacks.

2. Email Codes:

• How it works: A code is sent to your registered email address.
• Security: More secure than SMS but can be compromised if your email account is hacked.

3. Authenticator Apps:

• How it works: Apps like Google Authenticator or Authy generate time-based one-time passwords (TOTP).
• Security: Highly secure as codes are generated on your device and are not transmitted over the internet.

4. Hardware Tokens:

• How it works: Physical devices like YubiKey generate codes or use USB/NFC to authenticate.
• Security: Very secure as they require physical possession of the token.

5. Push Notifications:

• How it works: A notification is sent to your mobile device to approve or deny the login attempt.
• Security: Secure and user-friendly, but can be vulnerable if the device is compromised.

6. Biometric Verification:

• How it works: Uses fingerprints, facial recognition, or iris scans.
• Security: Extremely secure as it relies on unique biological traits.

7. Smart Cards:

• How it works: Physical cards that store cryptographic keys, used in conjunction with a PIN.
• Security: Very secure, especially when combined with other factors.

8. Security Questions:

• How it works: Answers to personal questions are used as an additional verification step.
• Security: Less secure due to the potential for answers to be guessed or found out.

Each method has its strengths and weaknesses, and the best choice often depends on the specific security needs and context. Combining multiple methods can provide an additional layer of security.

References

(1) 8 Multi Factor Authentication Types and How to Choose. https://frontegg.com/blog/multi-factor-authentication-types.
(2) Multi-factor Authentication (MFA) - CrowdStrike. https://www.crowdstrike.com/en-us/cybersecurity-101/identity-protection/multifactor-authentication-mfa/.
(3) Multi-Factor Authentication (MFA): Basics, Methods & Weaknesses | tenfold. https://www.tenfold-security.com/en/mfa-multi-factor-authentication/.
(4) What is Multifactor Authentication? A Guide to MFA | Kaseya. https://www.kaseya.com/blog/multifactor-authentication-mfa/.
(5) Multi-Factor Authentication | NIST - National Institute of Standards .... https://www.nist.gov/itl/smallbusinesscyber/guidance-topic/multi-factor-authentication.
(6) Multifactor Authentication | Cybersecurity and Infrastructure Security .... https://www.cisa.gov/topics/cybersecurity-best-practices/multifactor-authentication.

If you are interested in finding out more about the IISF, or would like to attend one of our Chapter Meetings as an invited guest, please contact the
IISF Secretary:

By email:
secretary@iisf.ie

By post:

David Cahill

Information Security

GPO, 1-117
D01 F5P2

Enhance your Cybersecurity knowledge and learn from those at the coalface of information Security in Ireland

Forum SPONSORS 

Invitations for Annual Sponsorship of IISF has now reopened.

(your logo & profile link here)

Sponsors are featured prominently throughout the IISF.IE website, social media channels as well as enjoying other benefits Read more