Zero Trust
Zero Trust is a security model that verifies every request explicitly, enforces least privilege, and assumes breach rather than trusting the network perimeter. SecurityX covers designing zero-trust architectures across the enterprise.
All CAS-005 Terms
Zero Trust
Zero Trust is a security model that verifies every request explicitly, enforces least privilege, and assumes breach rather than trusting the network perimeter.
SASE
SASE (Secure Access Service Edge) converges networking and security services — such as SD-WAN, SWG, CASB, and ZTNA — into a single cloud-delivered service.
Microsegmentation
Microsegmentation divides a network into small, isolated zones so that workloads can be secured and access controlled individually.
PKI
PKI (Public Key Infrastructure) is the framework of certificate authorities, keys, and policies that issues and manages digital certificates.
Certificate lifecycle
The certificate lifecycle is the full set of stages a digital certificate passes through — issuance, deployment, renewal, and revocation.
Post-quantum cryptography
Post-quantum cryptography refers to cryptographic algorithms designed to resist attacks by quantum computers.
Prompt injection
Prompt injection is an attack that plants adversarial instructions in the input to a generative AI system to subvert its intended behavior.
Model poisoning
Model poisoning is an attack that corrupts an AI/ML model by tampering with its training data or parameters to degrade or manipulate its outputs.
AI security
AI security is the practice of protecting AI/ML systems and the data they use from threats such as prompt injection, model poisoning, and data leakage.
DevSecOps
DevSecOps integrates security practices — such as scanning, secrets management, and policy-as-code — directly into the DevOps CI/CD pipeline.
Secrets management
Secrets management is the secure storage, rotation, and controlled access of credentials, keys, and tokens using tools such as vaults.
IaC
IaC (Infrastructure as Code) provisions and manages infrastructure through version-controlled definition files rather than manual configuration.
Threat hunting
Threat hunting is the proactive search through networks and endpoints for threats that evade automated detection.
UEBA
UEBA (User and Entity Behavior Analytics) detects threats by modeling normal behavior and flagging anomalies for users and entities.
Attack surface management
Attack surface management is the continuous discovery, inventory, and reduction of an organization's exposed assets and entry points.