thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Foundational

Security Through Obscurity

Relying on secrecy of design or implementation, rather than sound controls, as the main form of protection.

Definition

Security through obscurity assumes attackers will not discover hidden details such as non-standard ports or secret algorithms. It is weak as a primary control because secrets of design tend to leak and can be discovered by reconnaissance. It may add minor value as one layer but never replaces real controls.

Example

Moving SSH to port 2222 hides it from casual scans but does nothing against a full port scan.

Exam tip

Contrast with Kerckhoffs's principle: a cryptosystem should be secure even if everything except the key is public.

Related terms