The FREE Cybersecurity Glossary by Thor Pedersen!

Blind Test in Penetration Testing: The pentest method in which security professionals simulate an actual attack on a system, with limited information provided about the target beforehand. This approach is designed to mimic the real-world tactics and techniques of potential attackers, who typically have no inside information. It allows organizations to get a realistic understanding of their security vulnerabilities and how well their detection and response mechanisms perform under such conditions.

Block Cipher: A method of encrypting data where plaintext is divided into fixed-size blocks, typically 64 or 128 bits, which are then encrypted one block at a time using a specific key. Common block ciphers include AES (Advanced Encryption Standard) and DES (Data Encryption Standard). Block ciphers provide strong security by ensuring each block of data is encrypted independently, making unauthorized decryption more difficult.

Blowfish: A symmetric-key block cipher invented by Bruce Schneier in 1993. Designed as a general-purpose algorithm, it uses variable-length keys, making it ideal for both domestic and exportable use. Despite its age, Blowfish remains widely utilized due to its speed, simplicity, and security. However, its successor, Twofish, offers enhancements such as larger block sizes and additional security features.

Bypass Label Processing (BLP): A mechanism in some security models that permits bypassing security checks under specific conditions to enhance system performance. Used primarily in high-performance environments for low-risk data or operations, BLP requires careful consideration and compensating controls to manage potential security risks.

Backbone: The primary network infrastructure within a system that carries data across different nodes. Typically, it comprises high-speed connectivity paths that enable efficient routing and data transfer across large geographical areas. In complex network architectures, the backbone forms the critical "spinal cord" connecting various subnetworks, supporting smooth and reliable operations.

Backdoor: A method, often covert, that bypasses normal authentication or encryption in a system, allowing unauthorized access or control. Typically associated with malicious intent, these can be inserted intentionally for maintenance or troubleshooting but may also be exploited by adversaries to gain unpermitted access, which can lead to information theft, system damage, or other adverse impacts.