Backdoor
Noun · Security & Infosec · Origin: 1983
Definitions
Backdoor in cybersecurity is a covert method of bypassing normal authentication or security controls to gain unauthorized access to a computer system, network, or software application. Backdoors can be intentionally installed by developers (for debugging or maintenance access), secretly implanted by attackers who have already compromised a system (to maintain persistent access), or embedded in software by nation-state actors for espionage. Software backdoors might include hardcoded credentials, hidden admin accounts, undocumented API endpoints, or deliberately weakened encryption. Once a backdoor is established, an attacker can return to the system at will, exfiltrate data, install additional malware, or use the compromised system as a launching point for further attacks. The debate over intentional backdoors is contentious: law enforcement agencies have argued for mandated encryption backdoors to aid investigations, while security experts and cryptographers counter that any deliberately introduced weakness will eventually be discovered and exploited by malicious actors, making everyone less secure.
In plain English: A hidden way to get into a system that bypasses the normal login — like a secret entrance that only certain people know about.
Example: "Ken Thompson's 1984 Turing Award lecture demonstrated that a compiler backdoor could be essentially undetectable."
The XZ Utils backdoor (CVE-2024-3094) demonstrated how a patient attacker spent years building trust as an open-source maintainer before inserting a backdoor into a critical Linux component. A watershed moment for supply chain security.
Example: 'After the XZ backdoor, every maintainer succession in critical open-source projects gets much more scrutiny.'
Source: notable incident