The AI, Cloud & Cybersecurity
Encyclopedia

Account takeover (ATO) is a cyberattack where hackers steal login credentials and gain unauthorized access to user accounts — email,…

Active Directory is a directory service developed by Microsoft for Windows domain networks that provides centralized authentication, authorization, and resource…

A CASB (cloud access security broker) sits between users and cloud applications to enforce data security, access control, and threat…

Discretionary access control lets the resource owner decide who can access it and what they can do — making it…

Identity and access management (IAM) is the framework of tools and policies that controls who can reach what in your…

Identity threat detection and response (ITDR) is a security discipline that detects and stops attacks aimed at user identities, credentials,…

Indicators of compromise (IOCs) are forensic clues that a network or system has been breached — suspicious IPs, file hashes,…

MAC is the most secure access model — where a central authority controls everything and no user can change the…

Multi-factor authentication (MFA) requires two or more verification steps to prove identity before granting access. This article explains how MFA…

Network security is the set of tools, rules, and practices that protect computer networks and data from cyber threats. This…

Policy-based access control uses central, if-then rules to decide who can access what — based on identity, role, device, location,…

Privileged access management is the set of tools, rules, and processes that control who can access the most critical systems,…

Zero trust architecture is a security framework built on one core rule: never trust, always verify. Instead of guarding a…

ZTNA (zero trust network access) replaces VPNs by connecting users directly to apps, not networks. This guide covers how ZTNA…