Identity Attack Vectors: Implementing an Effective Identity and Access Management Solution

© Morey J. Haber, Darran Rolls 2020

M. J. Haber, D. RollsIdentity Attack Vectorshttps://doi.org/10.1007/978-1-4842-5165-2_14

14. Just-in-Time Access Management

Morey J. Haber¹  and Darran Rolls²

(1)

ORLANDO, FL, USA

(2)

AUSTIN, TX, USA

 

The concept of Just-in-Time (JIT) Access Management is a strategy that aligns real-time requests for usage of accounts directly with entitlements without the static assignment of an account or privilege to an Identity. Companies use this strategy to secure accounts from continuous real-time access by restricting them based on appropriate behavior, context, and other ephemeral properties. This decreases the risk of an always-on account that can be leveraged by a threat actor outside of acceptable use policies and procedures. ...