Multi-Factor Authentication (MFA)
Requiring two or more independent factors, something you know, have and are, so a stolen password alone cannot grant access to an account.
Browse the glossary →Related entries
- Weak Password and Credential Policy Vulnerability
- Broken Access Control Vulnerability
- Man-in-the-Middle (MitM) Attack Technique
- Remote Access Trojan (RAT) Malware
More glossary terms
- Principle of Least Privilege
- Every account, process and token receives only the minimum permissions required for its task, for the minimum time required, and no more.
- Attack Surface
- The total set of points where an unauthorised user can attempt to enter or extract data: exposed ports, endpoints, features, credentials and physical...
- Patch Management
- The process of identifying, testing and deploying updates across an estate on a defined schedule, with exceptions tracked rather than silently skipped...
- CWE
- Common Weakness Enumeration. A catalogue of the underlying defect class, for example CWE-89 for SQL injection, independent of any particular product o...
- Indicator of Compromise (IoC)
- A forensic artefact that suggests a system was breached: a file hash, a suspicious domain, an unusual registry key or a known-bad IP address.