Tokens have all but disappeared from public transportation, at least in their physical form. But small snippets of data called digital tokens have exploded in number, enabling online access to everything from your bank account to files in the cloud. NIST has issued its latest publication providing guidelines on protecting tokens from unauthorized access. NIST supports industry with publications on the latest important topics in cybersecurity, from zero trust architectures to smart speakers for home healthcare. Check out this and more in the latest edition of Tech Beat.
Token theft is where a lot of real incidents start, so dedicated guidance is welcome. Logging what each token was authorised to do at the time of use would also make the audit side a lot easier.
We keep getting better at protecting tokens. At what point do we ask how much authority possession of the token should represent in the first place?