2 Factor & Multi Factor Authentication A product delivered by

YubiKeys Two factors. One touch. Zero client software. YubiKey 4 Nano YubiKey NEO Tord This slide shows the two form factors of the YubiKey. To authenticate with a YubiKey you place it in the USB port with the keychain size and tap the blinking light in the gold area. For the nano size, you YubiKey fits entirely inside the USB port and you just touch the golden area to generate your login credentials. When you touch the YubiKey you are just verifying that you are a real human being and not a trojan – remember that this is not a biometric device. For mobile devices supporting NFC, you can tap a YubiKey NEO to the phone.

Customers Deployed by 8 of the top 10 internet companies www.yubico.com/customers Bestseller on Amazon.com Tord Our business model is simple: We offer our YubiKeys online, with free open source servers. We allow anyone to integrate with their own software, services, or enterprise IT-systems. Today we have shipped millions of Yubikeys to more than 150 countries. And 8 of the top 10 Internet companies use Yubikey internally, and have - or are in the process of - making support for their end-users. A product delivered by

Where Can I Use the YubiKey? OTP PIV OpenPGP FIDO U2F Tord The YubiKey can be easily integrated with your own software, service or enterprise IT-system. Or you can use it out-of-the-box, with a growing number of applications. The same YubiKey that I have on my keychain I use with my LastPass account, my corporate Salesforce account. And using one time password, I can use it as a PIV smart card to access my Windows environment. And I can use the same key to also log in to Google for Work, GitHub, and Dropbox with no third-party service or software installed. It just works out of the box. All three protocols are supported across all these apps with a simple touch on a single device. Next slide please. I’m now going to pass the presentation over to Tom, who will talk a bit more about all of these different protocols and use cases. Tom?

YubiKey 4 OpenPGP PIV Config Set 1 Config Set 2 OATH-TOTP FIDO U2F Yubico OTP OATH-HOTP Challenge-Response Static Credential Config Set 2 Yubico OTP OATH-HOTP Challenge-Response Static Credential Tom YubiKeys support multiple modes - each YubiKey combines the function of many other devices. Points: One device, multiple functions all working together at the same time. OATH-TOTP FIDO U2F

Passwords anyone? Reused Phished and MitM Keylogged

Didn’t we solve this already? Smart Cards SMS OTP devices Readers/drivers Middleware Cost Coverage Delay Cost Battery Battery Shared secrets One per site Provisioning costs OTP is short for One-Time Password Shared secrets are hard to protect and scale, and cannot be hashed.

...but most importantly User experience Still phishable MITM Users find it hard to use Successful attacks carried out today Successful attacks carried out today None of these technologies has any protection against phishing. If you can phish a password, you can phish a one-time password… Over 90 percent of hacking attacks begin with phishing.

...but most importantly User experience Still phishable MITM Users find it hard to use Successful attacks carried out today Successful attacks carried out today

...also No batteries or drivers One device Open standard Site-specific keys Standardized in the FIDO Alliance FIDO Alliance: 200 member companies. Led by Google, Microsoft, Yubico and others.

U2F at Google Compared to TOTP Google started rolling out U2F two years ago internally. Now almost all internal applications supports U2F.

Support incidents 40% fewer

Login times 400% quicker

Security incidents “Dramatic decrease, no more Phishing”

Resources Strengthen 2 step verification with Security Key Yubico Security Key Yubico Libraries, Plugins, Sample Code, Documentation FIDO U2F Protocol Specification Yubico Demo Server - Test U2F Yubico Demo Server - Test Yubico OTP Google security blog yubico.com/security-key developers.yubico.com fidoalliance.org/specifications demo.yubico.com/u2f demo.yubico.com

By your Yubikey Online on www.ciptor-Benelux.com ::: Danny Zeegers::: Danny@ciptor.com ::: PUB ::: A0973948 FF8A F719 AE58 2818 1B89 4D83 1CE3 9268 A097 3948 VP Sales BENELUX Cell: +32 471 68 68 78 Skype: Danny Zeegers By your Yubikey Online on www.ciptor-Benelux.com