Terminology Index

Glossary

1801 terms

Showing 1793-1801 of 1801 terms

bcrypt

A widely used password-hashing algorithm designed to be deliberately slow and to include a built-in salt, making stored passwords expensive to crack at scale. It remains a solid, well-supported choice for password storage.

blast radius

The amount of damage or access possible if one control or component fails.

ciphertext

Data that has been encrypted, rendering it unreadable without the correct key. It is the scrambled output of applying a cipher to plaintext, and protecting confidentiality means ensuring sensitive data exists as ciphertext wherever attackers might reach it.

eBPF-Based Observability

Using eBPF, a technology that safely runs custom programs inside the Linux kernel, to observe system and network activity at a deep level for security, capturing process, file, and network events with low overhead.

mTLS in Mesh

Mutual TLS between microservices, automatically managed by a service mesh, so each service authenticates the other and traffic is encrypted, providing identity-based, zero-trust-style protection of east-west communication.

plaintext

Data in its readable, unencrypted form, the input to encryption and the output of decryption. Protecting plaintext (and minimizing its exposure) is fundamental, since it is the form attackers want to obtain.

ZTNA Architecture

Zero Trust Network Access architecture: the design pattern that replaces VPN with identity- and device-aware brokered access to specific applications, granting only what's needed per session.

ZTNA replaces broad VPN access with identity-aware, application-specific brokered connectivity: a user authenticates, their device's posture is verified, and they get a connection to one application (not the whole network) for as long as policy permits. Architectures typically include a broker, connectors, and identity/posture inputs. As a ZTA topic, ZTNA architecture is the network-access side of zero trust and one of the most concrete, deployable parts of a ZTA program for many organizations.

Introduced in: Zero Trust Architecture

Examples

Replacing broad VPN access with ZTNA brokered to specific applications.
Verifying identity and device posture as part of each ZTNA connection.
Deploying ZTNA architecture as a concrete ZTA roadmap milestone.

iam advanced ztna-architecture

No related terms linked yet.

Zero Trust Networking

Applying zero-trust principles to the network layer, never trust the network position, verify and authorize each connection, that contrasts sharply with traditional perimeter-trust models.

Zero Trust Roadmap

A planned, phased path to adopt zero-trust architecture, identity first, then device, network, applications, that recognizes ZTA is multi-year and best implemented incrementally rather than all at once.