Contexte

The first source is a technical report from the French National Cybersecurity Agency (ANSSI) detailing a surge in critical vulnerabilities affecting network edge devices like VPN gateways and firewalls between 2023 and 2024. It highlights how attackers, including state-sponsored groups, exploit these security briques to achieve persistent network access and lateral movement within information systems. The second source is the OpenID Connect Core 1.0 specification, which defines a standardized identity layer built upon the OAuth 2.0 protocol. It outlines the authentication flows and security tokens necessary for clients to verify user identities and exchange profile information in a REST-like manner. Together, these documents address different facets of cybersecurity: one focuses on the risks and defense of physical security infrastructure, while the other provides a formal framework for secure digital identity management.

Chapitres

  • 0:00 — Introduction à Discover 360
  • 0:35 — Limites du mot de passe
  • 1:09 — Trois familles d’authentification
  • 1:42 — Risques et menaces concrètes
  • 2:15 — Solutions de sécurité avancées

Sources