"More Machine IDs, Attacks on Providers and AI Verification -- Identity Management Predictions for 2023"
Although the complete replacement of passwords has been prophesied for many years, earlier identity-verification methods continue to persist. However, this is changing, namely due to the exponential development of machine IDs. Some industry professionals have provided their forecasts for the identification industry in 2023. Shira Shamban, co-founder and CEO of Solvo, expects an identity-centric security model. In tandem with the emergence of a data-centric approach to security, an identity-centric paradigm will develop. When infrastructures were completely on-premises in the past, the network served as the security perimeter. In the cloud-native era of today and with the proliferation of Application Programming Interfaces (APIs), it is necessary to have strong Identity and Access Management (IAM) practices throughout the entire organization, creating a unique identity not only for each employee but also for the specific cloud components, such as containers, serverless functions, and data resources. Maintaining a state with the least privileges on a large scale will become increasingly important. Michael Mumcuoglu, CEO and co-Founder of CardinalOps, believes that identity providers will be the target of an increasing number of attacks. In addition to SolarWinds-style attacks on software vendors and attacks on Managed Security Service Providers (MSSPs) aimed at downstream consumers, identity providers such as Okta, OneLogin, and Microsoft Active Directory will be targeted by other attacks. Once an attacker has gained access to these systems, they may effortlessly impersonate employees, boost their privileges, and remain practically undetectable. Consequently, it is essential for enterprises to ensure that they are continually checking logs for unexpected actions, such as the creation of new user accounts, particularly from strange regions, as well as password changes and multi-factor authentication (MFA) resets. This article continues to discuss industry experts' identity management predictions for 2023.