lottery hackers...2020/06/02  · gerry’s winnings grew rapidly-$50$2,900 $286,000 $750,000...

Copyright © SailPoint Technologies, Inc. 2018. All rights reserved. 1

Lottery Hackers:

Securing an Expanded Identity

Mike KiserOffice of the CTO // SailPoint

Copyright © SailPoint Technologies, Inc. 2018. All rights reserved. 2

Copyright © SailPoint Technologies, Inc. 2018. All rights reserved. 3

Copyright © SailPoint Technologies, Inc. 2018. All rights reserved. 4

Copyright © SailPoint Technologies, Inc. 2018. All rights reserved. 5

Copyright © SailPoint Technologies, Inc. 2018. All rights reserved. 6

Copyright © SailPoint Technologies, Inc. 2018. All rights reserved. 7

Copyright © SailPoint Technologies, Inc. 2018. All rights reserved. 8

Copyright © SailPoint Technologies, Inc. 2018. All rights reserved. 9

The Duality of Gerry Selbee

Enhancement Exploitation

The Duality of Identity

Enhancement Exploitation

The Duality of Identity

Enhancement Exploitation

Identity is Expanding:

Identity is Expanding:

Digital Identity

Copyright © SailPoint Technologies, Inc. 2018. All rights reserved. 15

Copyright © SailPoint Technologies, Inc. 2018. All rights reserved. 16

Identity is Expanding:

Robotic Process Automation(Bots)

Internet of Things Spectrum

Independent Agents

Artificial Intelligence

Passive Devices

Access and Entitlement | Risk Level

Why Identity is Expanding:

User Experience

Copyright © SailPoint Technologies, Inc. 2018. All rights reserved. 20

Expanding Identity Securely: Growing Tomatoes

• Look for patterns of growth

• Start small

• Prove viability and expand the program

The Duality of Identity

Enhancement Exploitation

Copyright © SailPoint Technologies, Inc. 2018. All rights reserved. 23

Copyright © SailPoint Technologies, Inc. 2018. All rights reserved. 24

Gerry’s Winnings Grew Rapidly

-$50 $2,900$286,000

$750,000$1,400,000

$4,100,000$4,700,000

$7,750,000

2003 2004 2005 2006 2007 2008 2009 2010 2011 2012

Gerry’s Winnings Grew Rapidly

-$50 $2,900

$750,000

$4,700,000

$7,750,000

2003 2004 2005 2006 2007 2008 2009 2010 2011 2012

Securing Identity as it Expands

Discover Govern

Discover Expanded Identity Early

10500

5002,500

2,5002,500

5,000Ask Questions . . .

Discover Expanded Identity Early

10

500

2,5002,500

5,000Ask Questions . . .Check Business Initiatives . . .

Discover Expanded Identity Early

10

500

2,500

5,000Ask Questions . . .Check Business Initiatives . . . Poll Automation Usage . . .

Discover Expanded Identity Early

10

500

2,500

5,000Ask Questions . . .Check Business Initiatives . . . Poll Automation Usage . . .

. . . before it’s too late.

Copyright © SailPoint Technologies, Inc. 2018. All rights reserved. 32

Access

Attributes

Activity

Copyright © SailPoint Technologies, Inc. 2018. All rights reserved. 33

Copyright © SailPoint Technologies, Inc. 2018. All rights reserved. 34

Securing Identity as it Expands

Discover Govern

Copyright © SailPoint Technologies, Inc. 2018. All rights reserved. 36

Gerry’s Winnings Grew Rapidly

-$50 $2,900

$750,000

$4,700,000

$7,750,000

2003 2004 2005 2006 2007 2008 2009 2010 2011 2012

Gerry’s Winnings Grew Rapidly

-$50 $2,900

$750,000

$4,700,000

$7,750,000

2003 2004 2005 2006 2007 2008 2009 2010 2011 2012

Gerry’s Winnings Grew Rapidly

-$50 $2,900

$750,000

$4,700,000

$7,750,000

2003 2004 2005 2006 2007 2008 2009 2010 2011 2012

Copyright © SailPoint Technologies, Inc. 2018. All rights reserved. 40

Copyright © SailPoint Technologies, Inc. 2018. All rights reserved. 41

Copyright © SailPoint Technologies, Inc. 2018. All rights reserved. 42

Outliers = Risk

48Copyright © SailPoint Technologies Holdings, Inc. 2019. All rights reserved.

Accountability

+1-163-555-0168

+1-155-555-4727

+1-555-867-5309

1-512-555-4430

+1-775-555-3565

+1-785-555-7537

+1-405-555-3621

+1-614-555-0037

+1-281-555-8201

+1-755-555-5931

+1-409-555-8132

1-337-555-5568

+1-700-555-5408

+1-703-555-2912

+1-415-555-0289

+1-505-555-9777

+1-925-555-2801

+1-715-555-0699

+1-163-555-0168

+1-785-555-7537

+1-405-555-3621

+1-614-555-0037

+1-755-555-5931

+1-409-555-8132

+1-700-555-5408

+1-925-555-2801

+1-555-867-5309

+1-755-555-5931

+1-409-555-8132

+1-700-555-5408

+1-925-555-2801

+1-555-867-5309

+1-555-867-5309

Copyright © SailPoint Technologies Holdings, Inc. 2019. All rights reserved. 57

Securing Identity as it Expands

Discover Govern

The Duality of Identity

Enhancement Exploitation

Expanding Identity Securely:

(1) Expand Identity like Tomatoes

(2) Discover Emerging Use of Identity

(3) Govern Identity by Enforcing the Normal

Copyright © SailPoint Technologies, Inc. 2018. All rights reserved. 60