E-Business
30% of Firms to Use Biometric Authentication for Mobile Devices by 2016
The consumerization of IT and business bring your own device (BYOD) programs have resulted in potential security problems for IT leaders, according to Gartner Inc.
User expectations of a clean and simple mobile user experience often outweigh security concerns, and the same valuable data guarded by complex passwords and security measures on PCs can be left vulnerable on mobile devices.
Gartner predicts that, by 2016, 30 percent of organizations will use biometric authentication on mobile devices, up from five percent today.
“Mobile users staunchly resist authentication methods that were tolerable on PCs and are still needed to bolster secure access on mobile devices. Security leaders must manage users’ expectations and take into account the user experience without comprising security,” said Ant Allan, research vice president at Gartner.
Gartner has identified some potential security impacts of the consumerization of IT, and has made some recommendations for IT security leaders.
While most organizations require robust passwords on laptops, smartphones and tablet devices often have access to the same applications and critical data but not the same levels of security.
The increased number of devices in play also exacerbates the exposure of critical information. Implementing standard power-on password policies is made much more complex by the acceptance of BYOD practices, with the inevitable clash over user rights and privacy.
While complex passwords can be especially problematic for users to type on mobile devices, if these devices hold corporate data or provide access to corporate systems such as email without further login, even a default four-digit password is inappropriate.
However, support for more robust power-on authentication is patchy, with only a few mobile operating systems and devices supporting biometric authentication. Even in cases that do offer this support, the implementation may not be good enough for business use.
“An eight-digit numeric password will require hours to recover, and that will discourage casual hackers with toolkits,” said John Girard, vice president and distinguished analyst at Gartner.
“However, even a six-character lowercase alphanumeric password can provide billions of values. For most practical purposes, hackers are not prepared to pursue this large a set of combinations due to the relatively slow speeds involved in brute force attacks against smartphones and tablets.”
Gartner recommends that a password policy requiring use of at least six alphanumeric characters, and prohibiting dictionary words, is enforced on devices with access to corporate information via mobile device management (MDM) tools.
Some organizations attempt to counter the risks from a lost or stolen device by implementing controls that wipe a device after a limited number of incorrect password entries, or by remote command. “This practice does not wholly mitigate the risk because solid-state memory is nearly impossible to overwrite,” said Mr. Girard.
“The best practice is to use encryption that is not tied to the primary power-on authentication, meaning the key cannot be recovered from the device after a soft wipe operation has been performed.”
In addition, Gartner recommends that a further authentication method — at a minimum, another password — should be used for access to sensitive corporate applications and data.
In this way, even if a hacker breaches the power-on defenses, each additional app or store of data presents an additional challenge that will, collectively, present too much of a hurdle to be worthwhile.
In some cases, higher-assurance authentication is required. In PCs (traditionally), a standalone device may be used to provide a hardware token that might be used to provide additional authentication. “Traditional authentication of this kind is often spurned in mobile use cases, because of the poor user experience with most kinds of hardware tokens,” said Mr. Allan.
“Juggling the token in one hand, the phone in another and a latte in the third is increasingly resisted by mobile device users.”
Software tokens, such as X.509 credentials on the endpoint, provide options in this case, but often need MDM tools to be implemented properly and still require additional controls to provide the higher-assurance authentication necessary in some organizations.
Noble Ajuonu, head, Sydani Technologies Ltd., has urged the Federal Government to harmonise National Identification Number (NIN) and Bank Verification Number (BVN) to tackle crimes and insecurity in the country.
Ajuonu made the call at a media roundtable, organised by Sydani Group in Abuja.
The News Agency of Nigeria (NAN) reports that the roundtable focuses on driving sustainability through a comprehensive analysis of Nigeria’s key development areas.
Ajuonu said that Nigeria could overcome its security challenges and pave the way for a safer, more secure future for all Nigerians by embracing technology and implementing practical solutions,
“We need to harmonise data, prioritise seamless integration of databases like NIN, BVN, and security agency records, establish clear protocols for data sharing and access, with robust safeguards against misuse,’’ expert said.
According to him, the unified data pool will empower intelligence gathering and targeted operations.
He also called for investments in smart surveillance, intelligent video analytics software, training of personnel in data analysis, interpretation of data in real-time to combat crimes.
“There is need to implement a legal framework for call interception in criminal investigations, with strict oversight to prevent abuse, encourage community cohesion, training of tech savvy security personnel with tech-enabled tools.’’
Ajuonu also urged the government to address infrastructure deficit in technology, saying that technology was all encompassing to address insecurity.
“According to the National Identity Management Commission (NIMC), as of December 2023, only 104.2 million Nigerians had been enrolled for the National Identity Number (NIN).’’
Ajuonu added that over 122.2 million citizens left uncaptured for NIN were people in rural areas where enrolment centres, digital services were limited.
“Most crimes are being perpetuated from rural communities and this lack of comprehensive identification creates a gap where elements not captured in the national database can constitute public nuisance, crimes.
“There is the inadequacy in the integration of NIN, BVN and Voters Identification Number (VIN).
“Advanced call interception and analysis tools, used successfully in other countries, could provide invaluable insights into criminal networks and operations but infrastructure is lacking,’’ he said.
Also, Mr Godfrey Petgrave, the Agricultural Expert, Sydani Group, called for empowerment of smallholder farmers with access to finance and training to enhance productivity.
According to Petgrave, Nigeria requires policy reform and institutional strengthening to improve agricultural practices and embrace digital agriculture solutions to address food insecurity.
Mr Akolade Jimoh, another expert of the group on health, advocated for expanded community-based health insurance programmes for rural and underserved areas.
Jimoh added that the country needed to encourage Public Private Partnership to revolutionise products design and quality improvement on health services.
Konga, Nigeria’s leading composite e-commerce group, is thrilled to announce the launch of amazing deals at its Infinix Brand Week. Infinix, a leading global smartphone brand known for its innovative products and cutting-edge technology promises exclusive discounts and special offers on select smartphones, marking an exciting milestone in the realm of online shopping.
Shoppers can expect nothing short of extraordinary deals on a wide range of Infinix products, all available exclusively on the Konga online platform. With discounts of up to 30% off, this partnership between Konga and Infinix aims to redefine the shopping experience for tech enthusiasts across Nigeria.
Konga Brand Week has become synonymous with excitement and unbeatable deals, and this year’s edition is no exception. In addition to exclusive discounts on Infinix smartphones, shoppers can explore a diverse array of products across various categories, including electronics, fashion, home essentials, and more.
“At Konga, we are dedicated to providing our customers with the best shopping experience possible,” said Rita Ohaedoghasi, VP Marketing at Konga. “The Infinix Week during Konga Brand Week allows us to continue delivering on that promise by offering incredible discounts and special offers on some of the most sought-after smartphones in the market.”
To stay updated on the latest developments and exclusive deals during Konga Brand Week, shoppers are encouraged to connect with Konga across all platforms, including social media and the Konga website. Don’t miss out on this opportunity to score big savings and elevate your tech game with Infinix and Konga.
Gartner predicts that by 2028, 75 percent of enterprise software engineers will use Artificial Intelligence (AI) code assistants, up from less than 10 percent, currently.
According to a Gartner poll of 598 global respondents conducted in the third quarter of 2023, 63 percent of organisations are now testing, deploying, or have previously implemented AI code assistants.
AI code assistants provide for more capabilities than only code development and completion, notes the research firm.
According to Gartner, the use of AI code assistants can lead to higher work satisfaction and retention, resulting in lower turnover costs.
Philip Walsh, senior principal analyst at Gartner, comments: “Software engineering leaders must determine ROI and build a business case as they scale their rollouts of AI code assistants.
“However, traditional ROI frameworks steer engineering leaders toward metrics centred on cost reduction. This narrow perspective fails to capture the full value of AI code assistants.”
Gartner notes that software engineering leaders must “reframe the ROI conversation from cost reduction to value generations”.
Walsh adds: “Calculating time savings on code generation is a good place to begin building a more robust value story. To convey the full enterprise value story for AI code assistants, software engineering leaders should connect value enablers to impacts, and then analyse the overall return to the organisation.”
PalmPay Unveils First Set of Winners in Eid Mobile Bonanza
Access Bank Unveils DiamondXtra Season 16, Dangles N200m, 3 SUVs
Imperative of Upholding Nigeria’s Telecoms Lifeline
Lafarge Africa Launches Girls-in-Tech Programme to Empower Women Innovators
Kaspersky Warns of Data Stealers Hunting for User Credentials
See Full List of Fake Loan Apps Blacklisted By CBN
FIRS Files Tax Evasion Charges against Binance
IFC Invests in New 4DX Ventures Fund to Support Tech Startups in Africa
AXA Mansard Empowers Female SMEs with Financial, Digital Skills
Moniepoint Study Reveals How Strong Cultural Bonds, High Levels of Trust Drives Nigerian Family Businesses
News3 days agoBankers, Officials Colluding to Re-loot Recovered Abacha’s Fund- EFCC
Telecom3 days agoLayer3 Achieves Recertification for ISO/IEC 27001:2022, ISO/IEC 27017:2015, PCI-DSS and Nigeria Data Protection Compliance
News3 days agoFITC to Redefine HR with AI, Digitisation for Organisational Sustainability
E-Financial3 days agoMasterCard, Onafriq Partner to Bring New Payments Suite to Africa
News2 days agoQNET Raises Alarm over Fraudulent Use of Foundation’s Name in Nigeria
News3 days agoNASENI Collaborates with NIPSS on Enhancing Digital Economy, Job Creation
News2 days agoSoftTalk Messenger Introduces Chat and Make Calls without Sharing your Phone Number
Telecom3 days agoWhy E-commerce is Thriving in South Africa