This talk provides a data driven analysis of how accounts get compromised. Then it provides an in-depth overview of the defense we found effective at Google to protect users from account compromise. In particular we will cover how to mitigate password reuse, build a risk aware login system, and how to setup an Advanced Protection Program to protect users at risk of targeted attacks.
Account protections -- A Google Perspective
- Download Slides (Online)
- Conference International Cybersecurity Forum 2020
- Authors Elie Bursztein
Selected press articles
Google releases open-source 2FA security key platform called OpenSK
Android Police - Ryne Hager - Jan 2020