D3FEND 技术详情

D3-CRO

D3-CRO

Credential Rotation

定义

Credential rotation is a security procedure in which authentication credentials, such as passwords, API keys, or certificates, are regularly changed or replaced to minimize the risk of unauthorized access.

父技术
子技术
关联构件
Credential
Credential

A credential is a physical/tangible object, a piece of knowledge, or a facet of a person's physical being that enables an individual access to a given physical facility or computer-based information system. Typically, credentials can be something a person knows (such as a number or PIN), something they have (such as an access badge), something they are (such as a biometric feature), something they do (measurable behavioral patterns) or some combination of these items. This is known as multi-factor authentication. The typical credential is an access card or key-fob, and newer software can also turn users' smartphones into access devices.

语义关系
出向kb referenceReference - Eviction Guidance for Networks Affected by the SolarWinds and Active Directory/M365 Compromise - CISA
出向kb referenceReference - Password and Key Rotation - SSH
出向regeneratesCredential