Attacks/Breaches
7/25/2013
09:46 AM
Dark Reading
Dark Reading
Products and Releases
Connect Directly
RSS
E-Mail
50%
50%

RSA Adaptive IAM Goes Mobile With Acquisition Of PassBan

PassBan is ae developer of mobile and cloud-based multifactor authentication technology

Mobile is fast becoming the default way to access enterprise data and resources. But access to resources is rarely protected on most smart devices. With the advent of cloud apps and mobility, one of the most elusive capabilities for authentication and IAM vendors has been providing support for a variety of authentication technologies that better protect access to resources available on or from mobile devices, as well as back-end policy management – all built within a single solution.

RSA is excited to accelerate this vision as we welcome San Francisco-based PassBan to the RSA-EMC family. PassBan is an innovative developer of mobile and cloud-based multifactor authentication technology. We expect PassBan's technology and talent will help RSA accelerate delivery of our Adaptive IAM vision as well as broaden and strengthen RSA's mobile partner ecosystem. PassBan enhances all of the key tenets of RSA's Adaptive IAM vision:

Reliance on rich identity profiles

Risk-based and intelligence-driven authentication and access controls

Solutions optimized for cloud and mobile infrastructures

PassBan is the latest advancement that will help RSA build on the successful release of the RSA Authentication Manager 8 platform and the recent acquisition of IAM leader Aveksa, to help customers on their journey to Adaptive IAM across enterprise, cloud and mobile IT environments.

Let me tell you a little more about what motivated us to do this acquisition, and be sure to read the corresponding blog from PassBan CEO and Co-Founder, Kayvan Alikhani. As many security professionals are aware, today's authentication model must enable and support multiple authentications from multiple devices to cloud-based, on-premise, and mobile applications. PassBan's innovative, mobile-optimized authentication technology will help RSA build upon our strong position in authentication to address these new requirements. In fact, RSA has been active in the mobile space for over a decade now. Introduced in 2002, RSA SecurID® software tokens enable customers to turn mobile devices into authentication form factors, and PassBan's technology will enable us to take that even further as RSA continues to enhance both our mobile authenticator offerings and add new seamless ways for securing the mobile to enterprise channel.

PassBan's technology offers modern multi-factor verification methods including biometrics, voice and facial recognition, geo-location, and on-demand OTP tokens. These new methods take advantage of smart device platforms and complement the broad capabilities already available in RSA's industry-leading Authentication Manager 8 platform. These additional authentication methods also support RSA's assertion that reliable identity assurance should consider a wide variety of factors culled from many different sources ("infinite factor") while also prioritizing ease of use.

Because mobility has primarily been a consumer-driven trend, users have come to expect a highly convenient, intuitive experience on their mobile devices. PassBan's mobile-optimized authentication technologies coupled with the team's relentless focus on usability will help RSA extend "consumer-level" convenience within the enterprise authentication space.

Beyond the team and technology itself, we are also excited to work with PassBan's mobile technology partners and incorporate them into our mobile partner ecosystem. As part of the Secured by RSA Certified Mobile Partner Program, RSA has developed partnerships with companies including Citrix and Good Technology, which are experts in enterprise mobility, and we look forward to adding new mobile technology partners to this program as well.

Be sure to watch this space as we help accelerate our customer's journey to Adaptive IAM.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
Partner Perspectives
What's This?
In a digital world inundated with advanced security threats, Intel Security seeks to transform how we live and work to keep our information secure. Through hardware and software development, Intel Security delivers robust solutions that integrate security into every layer of every digital device. In combining the security expertise of McAfee with the innovation, performance, and trust of Intel, this vision becomes a reality.

As we rely on technology to enhance our everyday and business life, we must too consider the security of the intellectual property and confidential data that is housed on these devices. As we increase the number of devices we use, we increase the number of gateways and opportunity for security threats. Intel Security takes the “security connected” approach to ensure that every device is secure, and that all security solutions are seamlessly integrated.
Featured Writers
White Papers
Cartoon
Current Issue
Dark Reading's October Tech Digest
Fast data analysis can stymie attacks and strengthen enterprise security. Does your team have the data smarts?
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-8243
Published: 2014-11-01
Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote a...

CVE-2014-8244
Published: 2014-11-01
Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote a...

CVE-2013-0334
Published: 2014-10-31
Bundler before 1.7, when multiple top-level source lines are used, allows remote attackers to install arbitrary gems by creating a gem with the same name as another gem in a different source.

CVE-2014-2334
Published: 2014-10-31
Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2336.

CVE-2014-2335
Published: 2014-10-31
Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2336.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Follow Dark Reading editors into the field as they talk with noted experts from the security world.