Containment Glossary

Browse 14 containment terms defined in plain English, from the cultural dictionary of computing.

14 Containment Terms

Chroot Jail
A Unix isolation technique that changes a process's apparent root directory, restricting how it can access parts of the filesystem. Chroot jails provide...
DNS Sinkhole
DNS Sinkhole is a defensive DNS response that redirects malicious domain requests to controlled infrastructure for blocking or observation. Security teams use...
Egress Filtering
Egress Filtering is network policy that controls which outbound traffic, destinations, ports, or protocols are permitted. Security teams use it to enforce...
Endpoint Isolation
A response action that cuts a suspicious or compromised device off from most network communication while preserving enough access for investigation or...
Incident Containment
Incident Containment is the set of actions used to limit the spread and impact of an active security incident. Security teams use it to enforce trust, reduce...
Isolation
Isolation is the separation of components, workloads, users, or networks so compromise in one area does not freely spread. Security teams use it to enforce...
Live Response
The practice of connecting to a live system during an incident to collect information, run limited commands, and sometimes contain activity without first...
Lockdown
A state or action in which systems, accounts, or environments are tightly restricted to prevent further abuse, spread, or change. Lockdown can refer to...
Mean Time to Contain
A response metric measuring how long it takes from detection or incident start to the point where the threat is effectively isolated or prevented from causing...
Network Isolation
The deliberate separation of systems or segments so traffic between them is prevented or tightly controlled. Network isolation is used both for architecture,...
Network Segmentation
Network Segmentation is the division of networks into smaller trust zones so movement and blast radius are constrained. Security teams use it to enforce trust,...
Quarantine
A containment action that isolates suspicious files, messages, devices, or systems so they cannot continue to spread harm or interact normally until reviewed....
Ring Fence
To isolate a system, dataset, account, or environment from broader access so risk is contained within a defined boundary. In security operations, ring-fencing...
Ring Fence Slang
Informal language around isolating risk, scope, or affected systems so problems cannot spread as widely. In engineering slang, ring-fencing is one of the core...

Related Topics