Least privilege
Giving an app, or a person, only the access they truly need, nothing more.
Learn it through a story
- The Game That Asked for Too Much (Cybersecurity for Juniors 1, Ch 3)
- Welcome to the Blast Radius (Cybersecurity for Juniors 3, Ch 1)
- The Forwarded Message With a Secret Order (Jugnupur Tales Vol 2, Ch 6)
Short on time? Read the 5-minute version.
Related terms
- JWT (JSON Web Token) A compact, signed token format commonly used to represent a logged-in session.
- KYC Know Your Customer, the paperwork banks use to confirm who you are.
- Lateral movement An attacker moving from one compromised system to another inside a network.
- Malware Malicious software, built to harm, spy on, or exploit a device.
- MFA (multi-factor authentication) Requiring a second proof of identity beyond just a password.
- Model extraction Copying how a model behaves by sending it huge numbers of questions.