Andrew Shikiar, Senior Director of Marketing, FIDO Alliance

We are back from an educational and productive week at RSA Conference 2017 that saw over 40 FIDO members exhibiting an array of security solutions, including dozens of FIDO® Certified offerings. Despite the fact that RSAC is a large show with more than 40,000 attendees, we still heard many common themes in our travels around the sessions and the show floor. These are our top three takeaways from the event:

Authentication is a C-Suite Issue. There was a theme at the conference that CISOs need to “get back to basics” to defend against the growing list of cyberthreats. As Fahimda Rashid says in her kick-off for RSAC last week for InfoWorld, “Attacks succeed when enterprises fail to get the basics right.” Those “basics” include best practices for identity and access management, including FIDO Authentication to combat phishing and man-in-the-middle attacks. Judging from the attendance at the FIDO implementer session, the traffic on the show floor at the FIDO Alliance booth and the strong FIDO presence at our members’ booths, attendees agreed with this need and were clamoring for information on how to implement FIDO Authentication today.

Securing the Internet of Things (IoT) is a Top Concern. Amongst the steady stream of traffic at the FIDO Alliance booth were security executives with questions about how FIDO Authentication can secure the Internet of Things. Indeed, the growing number connected devices and the corresponding growth of IoT-related breaches (e.g., Forrester has predicted that more than 500,000 IoT devices will be compromised in 2017) has highlighted the importance of strong, standards-based authentication over passwords to secure IoT. FIDO Authentication is ideally suited to provide simpler, stronger authentication for users to control their IoT-connected devices. In fact, we are already seeing organizations earn FIDO certification for IoT-specific devices and connected cars — most recently, Fujitsu announced it’s FIDO-based platform for IoT authentication.

Leading Security Practitioners Believe in FIDO Authentication. The panel of FIDO present and future implementers — Google’s Christiaan Brand, USAA’s Wil Bennett and Aetna’s Abbie Barbir and moderated by RSA’s Kayvan Alikhani — made the virtues of FIDO Authentication clear. Aetna’s Barbir said that “FIDO is a building block for simplicity, scale and security,” while USAA’s Bennett said that “FIDO gives USAA a way to implement standards-based authentication across heterogeneous architecture while navigating regulatory requirements.” In regards to user protection, Google’s Brand stated that “FIDO affords the highest level of protection against phishing and forms the basis for all authentication at Google”. FIDO Alliance Executive Director and fellow panelist Brett McDowell agreed, saying that “if the problem you are trying to address is phishing, then now is the time to deploy FIDO Authentication.” That’s just the tip of the iceberg of what the panelists shared; be sure to check out the recording to hear the full session.


FIDO Alliance addresses accuracy and bias in remote biometric identity verification technologies with first industry testing and certification program

Face Verification Certification launched to bring confidence to ID ecosystem among rising online identity theft…

Read More →

FIDO Alliance Releases New Design Guidelines for Optimizing User Sign-in Experience with Passkeys

May 29, 2024 – The FIDO Alliance today released new design guidelines to help accelerate…

Read More →

FIDO Taipei Workshop: Securing the Edge with FDO

[Watch the FIDO Taipei Workshop Recap Video] On April 24, 2024, the FIDO Alliance held…

Read More →

12362 Next