Concepts

Concepts related to access management and data security
Concepts

Kerberos Zero Standing Privilege: Eliminating Permanent Admin Accounts for Stronger Security

Kerberos Zero Standing Privilege is the practice of eliminating permanent privileged accounts in Kerberos-based authentication. Instead of accounts with ongoing elevated rights, privileges are granted only when needed, and revoked immediately after use. This reduces the window for compromise to minutes, not months. Standing privileges are dangerous because Kerberos tickets
1 min read