Breaking Password Dependencies - Challenges in the Final Mile at Microsoft

Explore the challenges and solutions in eliminating password vulnerabilities within large enterprises in this 51-minute RSA Conference talk. Gain insights from Microsoft's journey towards complete password dependency remediation as Lee Walker and Alexander Weinert share practical guidance for achieving 100% security coverage. Learn about the dangers of legacy authentication, the impact of technical debt, and strategies to close security gaps that attackers exploit. Discover how Microsoft IT blocked 1.5 million legacy authentication attempts daily, leading to a 67% reduction in account compromises. Understand the importance of disabling legacy authentication and implementing modern security measures to protect against password spray and replay attacks. Suitable for those with a general understanding of IAM concepts, logging, analytics, and multi-factor authentication.

Breaking Password Dependencies: Challenges in the Final Mile at Microsoft
1.2M compromised accounts in January 2020
99% of Password Spray attacks use legacy auth
97% of Replay attacks use legacy auth
67% Reduction in compromises in tenants who disable legacy auth
Blocking legacy authentication Inside Microsoft IT
Blocking legacy authentication: In Practice The inside story of Microsoft IT's actual experience
1.5M blocked legacy auth attempts per day