What is Principle of Least Privilege?
The practice of limiting access rights for users to the bare minimum permissions they need to perform their work.
Why it matters
Understanding this concept helps in grasping how modern networks and security systems operate, providing a foundation for more advanced topics.
Real-world Analogy
Like giving an employee the key only to the supply closet they need, rather than a master key to the whole building.
Other Dictionary Terms
Access Control List (ACL)
A list of rules that specifies which users or systems are granted or denied access to a particular object or system resource.
Dictionary TermAdvanced Persistent Threat (APT)
A stealthy threat actor, typically a nation state or state-sponsored group, which gains unauthorized access to a computer network and remains undetected for an extended period.
Dictionary TermARP Spoofing
A type of attack in which a malicious actor sends falsified ARP (Address Resolution Protocol) messages over a local area network.