Backdoor
Threats
Unauthorized or hidden access mechanism bypassing authentication.
Glossary
Plain-language explanations for encryption, tracking, compliance, and security concepts.
Threats
Unauthorized or hidden access mechanism bypassing authentication.
Security
Secondary copy of data for recovery; must be secured, tested, and lifecycle-managed.
Authentication
Pre-generated one-time recovery codes used when primary MFA methods are unavailable; treat as high-value secrets.
Data Management
Secondary copies of data for restoration; must be protected (encryption, access control) and tested regularly.
Session Management
Token presented as proof of authorization without additional binding; requires TLS and short lifetimes.
Advertising
Targeted advertising based on inferred interests from observed behaviors across contexts.
Advertising
Inference and segmentation of users based on behavioral data and predictive models.
Tracking
Collection of user interaction events to infer behavior and preferences.
Authentication
Inherence-factor verification using biometric templates.
Privacy
Physiological or behavioral identifiers used to uniquely recognize individuals.
Privacy
Use of biometric identifiers at scale for identification, verification, or tracking across contexts.
Security
Distributed ledger maintained by consensus among network participants.
Security
Denylist of indicators for automated enforcement.
Security
Identification of automated behavior using signals and heuristics.
Threats
Distributed set of compromised hosts under common control.
Law
Legal and policy process to notify regulators and/or data subjects after certain security incidents.
Privacy
Add-on code with elevated browser permissions.
Tracking
Technique creating an identifier from browser-exposed attributes and behaviors.
Security
Security architecture that executes web content remotely or in hardened containers to reduce risk.
Threats
Exhaustive or high-volume credential/key guessing.
Security
Incentivized vulnerability disclosure with defined scope and process.
Data Management
Program ensuring critical operations continue during disruptions, covering people, processes, and technology.
Security
Policy model allowing personally owned devices to access organizational resources under controls.