'Network effect' can cut identity theft

Providers of identity technologies need to work together more efficiently to beat the onslaught of phishing attacks and identity theft, according to security firm Verisign.

Nico Popp, chief technology officer and vice president for authentication services at Verisign, told delegates at the Digital Identity World conference in San Francisco that "networks are the answer".

When banks and websites start sharing information about online attacks, a "network effect" is created which could prevent victims falling prey to the same attack.

This network effect, better knows as Metcalfe's Law, states that the value or power of a network increases in proportion to the square of the number of nodes on the network. A single fax machine is worthless, for example, but with every additional machine the network gains more value.

"[In a network] every protected site creates a better protection for all," said Popp.

In addition to banks working together to thwart phishing attacks and identity theft, consumers should expect anti-phishing agents that come either with the browser or through their ISP.

Websites will also have to start offering feedback to the user to establish that they are visiting a legitimate banking website and not a phishing site.

There is a clear economic incentive to deal more effectively with online authentication, according to Popp. If consumers lose trust in online services, they will use other ways to contact institutions like their bank. It is currently 99.95 per cent less expensive for a bank to perform a transaction online than at a high street branch.

Lastly there is the threat of government regulation if the industry fails to solve the authentication issue. Regulation generally makes it more expensive for organisations to operate.

"Maybe it would be a good move for the industry to start regulating itself before getting regulated," concluded Popp.

See also:

Microsoft calls for online identity overhaul

Replacement for failed Passport system to be unveiled this week  11 May 2005

Government regulation driving ID management

But fewer than one in 10 IT directors can define an identity management system  26 Apr 2005

Identity checks combat malware

Advances in authentication promise new capabilities to block scams and malware  29 Mar 2005

Security

The latest wave of cyber-crimes and acts of vandalism have demonstrated once again that many systems are still vulnerable to attack.  15 Apr 2004

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!