I Am You, and I Can Prove It: Defeating and Redesigning Help Desk Identity Verification

About this talk

By impersonating employees and outwitting common identity verification procedures, threat actors use phone-based social engineering attacks against IT help desks to achieve account takeover in ways that bypass security controls. This talk will reveal just how easy it is to circumvent common verification procedures and explain why and how these processes fail. Attendees will learn practical, best-practice methods for verifying employee identities over the phone and thwarting social engineering attacks.

The speaker

• SB

  Stephen Bondurich

Where it is