The principle of least privilege: A strategy of limiting access to what is essential

Minimalist · Jul 2, 2018

In a recent conversation with our marketing analyst at ESET Mexico, Juan Carlos Fernández, we discussed a story about a scam carried out by a bogus company during his time as a university student. The company, which allegedly recruited students, collected information included on the résumés of those who applied.

No students were actually hired, of course, but their personal information had been provided voluntarily. The incident would be quite irrelevant if it wasn’t for the fact that résumés usually include personal information and data, which can compromise people’s safety if it falls into the wrong hands. In the case of university students, data such as their photographs, addresses, contact information, social network accounts, and other information will no doubt be included.

And while this information may be necessary for some recruiters, it is highly likely that it is not essential when finalizing the hiring process. The idea of only providing the required information, and access to it, can be applied to different areas, and cybersecurity is no exception. This good practice is known as the principle of least privilege, and we discuss it in this publication.
Click to expand...

https://www.welivesecurity.com/2018/07/02/principle-least-privilege-strategy/

Log in or Sign up

The principle of least privilege: A strategy of limiting access to what is essential

Minimalist Registered Member

Log in or Sign up

The principle of least privilege: A strategy of limiting access to what is essential

Minimalist Registered Member

Useful Searches