Terminology Index

Glossary

2953 terms

bcrypt

A widely used password-hashing algorithm designed to be deliberately slow and to include a built-in salt, making stored passwords expensive to crack at scale. It remains a solid, well-supported choice for password storage.

eBPF-Based Observability

Using eBPF, a technology that safely runs custom programs inside the Linux kernel, to observe system and network activity at a deep level for security, capturing process, file, and network events with low overhead.

mTLS in Mesh

Mutual TLS between microservices, automatically managed by a service mesh, so each service authenticates the other and traffic is encrypted, providing identity-based, zero-trust-style protection of east-west communication.

Zero Trust Assumptions

Zero trust assumptions document what an architecture treats as potentially hostile, what critical services it depends on, and how compromise or outage affects access.

Zero Trust Definition

Zero trust is a security model that minimizes uncertainty in least-privilege resource access without granting implicit trust solely from location, ownership, affiliation, or prior authentication.

Zero Trust Maturity Assessment

A zero trust maturity assessment compares evidenced current and target capabilities across defined resources and use cases without claiming a binary certification or unsupported precision.

Zero Trust Networking

Applying zero-trust principles to the network layer, never trust the network position, verify and authorize each connection, that contrasts sharply with traditional perimeter-trust models.

Zero trust networking treats network location as meaningless for trust: a connection from inside the corporate network gets no more inherent privilege than one from the public internet. Every connection is authenticated, authorized, and ideally inspected. It uses microsegmentation, identity-aware proxies, and continuous verification. As a hardening and networking topic, zero trust networking is the network-layer expression of the broader zero-trust philosophy and is part of the move away from perimeter security.

Introduced in: System Hardening Fundamentals, Networking Foundations

Examples

Treating internal-network connections with the same scrutiny as external ones.
Using identity-aware proxies and microsegmentation to enforce zero-trust networking.
Phasing out flat networks where inside means trusted.

Microsegmentationrelates_to ZTNA Architecturerelates_to Network Segmentationrelates_to ZTNA Architecturerelates_to Three-Way Handshakerelates_to TXT Recordrelates_to

Zero Trust Outcome Metrics

Zero trust outcome metrics measure resource coverage, reduced implicit access, enforcement quality, revocation, bypass, resilience, exceptions, unsafe grants, false denials, and user remediation with defined denominators and data health.

Zero Trust Roadmap

A planned, phased path to adopt zero-trust architecture, identity first, then device, network, applications, that recognizes ZTA is multi-year and best implemented incrementally rather than all at once.