Fixing AWG’s Critical Authentication Issues with a Focus on Long-Term Security

The Solution: Immediate Stabilization

DeepNet quickly devised and implemented a temporary solution to stabilize AWG’s operations:

1. Porting SMS Functionality: AWG’s existing phone numbers were transitioned to a new provider capable of handling SMS functionality. This ensured continuity in receiving critical 2FA messages.

2. Integration with Existing Tools: SMS messages were routed through a secure channels and integrated into current team collaboration tools ensuring ongoing management and secure access.

3. Workflow Automation: To handle multiple accounts, multiple workflows analysed & set up to ensure seamless routing of messages to the correct recipients within AWG teams & departments.

While this solution provided a stopgap to prevent immediate operational issues, it was not a permanent fix due to the limitations of SMS-based authentication.

Long-Term Solution

Recognizing the vulnerabilities and limitations of SMS-based 2FA, DeepNet is helping to transition to a more secure and sustainable authentication system. The solution includes:

1. Introducing a password management solution that supports one-time passwords (OTPs) and QR code-based authentication. Key advantages of this approach include:

• Scalability: The shared password manager vault system will allow AWG to efficiently manage credentials across hundreds of accounts without risking operational bottlenecks.

• Multi-layered security: Ensures robust protection by incorporating multiple stages of verification, such as two-factor authentication for account access, shared organizational vaults for secure credential management, and individually encrypted credentials.

• Centralized Management and Control simplifies management by consolidating credentials into a secure platform, ensuring unified access policies & seamless access delegation.

‍