Time for a new Magic Quadrant


You have all heard of the Magic Quadrant.  An industry benchmark by which the, mostly, established players like to measure themselves against each other.    To quote Wikipedia (that repository of all Internet wisdom ;-))

“the Magic Quadrant aims to provide a qualitative analysis into a market and its direction, maturity and participants, thus possibly enabling a company to be a stronger competitor for that market.”  


The axes of the ‘Quadrant’ are ‘ability to execute’ and ‘completeness of vision’ and the methodology used to apply the ranking remains a closely guarded secret (or mystery depending on how you look at it.)  


The MQ applies to many niches in the tech sector.  I want to consider the  User Authentication MQ.  Notably because the space is getting much media attention these days.   Hackers ! 


Wikipedia says that the aim of the analysis it is to  “ ..enable a company to be a stronger competitor for that market “ .   So you would look at all the players and see ‘ which player you should aspire to be most like.’ 


However there is a small problem in the realm of User Authentication.   The companies highlighted in this category represent a very diverse spectrum of enabling technologies all aimed at authenticating users.   They range from the industry behemoths like RSA and Vasco to smaller, newer and exciting players like Phone Factor.   


So lets understand exactly what it is that these companies do.  They protect their staff, their data, their customers and business partners from the unwanted attentions of hackers who are constantly trying to gain access to their systems and their data.   So presumably in order to get into the Magic Quadrant you have to be top of your game?   These guys represent the elite of the Authentication industry.  


The solutions that they sell (in an industry now worth about $2bn) all fall nicely into one of the following three broad categories: 


• Device recognition –Java Script browser scraping and literal device info recognition 
• Certificates, Cookies, Soft Tokens – downloaded to the device and re-referenced
• OTP, Images/Challenges – dongles, PIN generators, SMS OOB 


Considering the industry is replete with all manner of technical wizardry why is it that our headlines continue to read like a hackers dream ( and a CIO’s nightmare).  Only last week Zappos was hacked.  


What it means is that these solutions are not working.  Yet these companies manage to continue convincing their customers that with ‘their’ solution they are safe!  


I wonder what CNN moment it will take before businesses and Governments realize that they have been led a merry dance.  Another SONY? Epsilon?  Or possibly some large critical national infrastructure failing under an attack leading to a disaster like a train or airplane crash or power grid failure.   God forbid.  


Lets hope sense prevails before we get there.  Get Live Ensure.  Many are starting to drink the Kool Aid and are seeing the light.  Join them. 


Maybe it is time for a new MQ.? 


Link: http://www.gartner.com/technology/reprints.do?st=sb&id=1-18UHKYY&ct=120118

Comments

Post a Comment

Popular posts from this blog

The End of Passwords

Finally it seems … the penny has dropped.   Passwords are a poor substitute for real online security.   There is more and more ‘chatter’ about it.    Robin Henry writing in the Sunday Times on New Years Day talks of the end of ‘password hell’ invoking solutions in the pipeline from the Web Gods – Apple and Google.  The talk is of new biometric solutions such as facial and hand movement recognition.  Even IBM is talking this way.  ( http://www.forbes.com/sites/thestreet/2011/12/20/ibms-tech-predictions-for-the-next-5-years/ )  I agree with the notion that passwords are a dying breed but not that biometrics will become vogue.   They are fraught with problems of their own such as reliability, accuracy and the need for referencing of data-bases ( fail !) .    Why are passwords defunct?   Basically they are difficult to remember and they are easy to steal.    The solutions needed are those that require no cognitive load for the user ( the most unreliable participant in this enterprise
Read more

WIKILEAKS - the fuss?

Why all the fuss ? Why the ‘outrage’ at this ‘threat to national security’ ?   Are we really worried that nuclear war is going to break out because of these ‘dirty’ secrets getting out.  As if the North Koreans are going to up the ante any more than their mock charge of last week because of the abuse and scorn heaped upon them by US Diplomats.  ? !    Come on. To me the irony of this bluster is that it is (largely) from the right wing establishment in the US - calling it treason!     Any party that parades a half wit like Palin as a presidential hopeful hardly holds any moral high ground when it comes to protecting the USA.   Her appointment as the ‘leader of the free World’ will be enough to send any level headed American ( let alone any one of their Allies ) into a panicky tailspin at the thought of what she may stumble into ( by accident or design) . So how did these documents get out there?   Poor security.  Plain and simple.   If the US is so worried about this incident su
Read more

SPOOKS - CYBER ATTACK

Well I’ll be damned – if the subject of my last blog wasn’t the central theme to last nights episode of Spooks – CYBERWAR.    (To those who live outside the UK – Spooks is a very popular TV series about the goings on of a key team inside MI5 who spend their time thwarting terrorist attacks on the UK – while engaging in risqué amorous trysts on the side ).   And so last night we had the Russians and the Chinese –(working together !!) – ganging up on MI5 by infiltrating ( hacking ) their ‘secure’ internal network.     Whether the events portrayed were within the bounds of possibility or credibility who knows?     But if teenagers can break into the Pentagon – then I am sure that Russian/Chinese expert hackers can probably do something along the lines of infiltrating a UK Govt ‘Spooks’ departments network.      Either way it constituted an attack on British soil by foreign ‘combatants’ – which ( if it were true ) would have been a first since the Normans in 1066.   So we saw how vulner
Read more