usecured

Usecured is a neologism in information security describing data or systems that are in active use while protected against unauthorized access. It highlights protection during computation and memory access, complementing concepts of data at rest and data in transit.

The term is a portmanteau of "use" and "secured" and is not standardized. It appears in informal security writings to discuss how processing can occur without exposing data, often referencing techniques such as trusted execution environments and encryption during use.

Technical scope commonly includes approaches like trusted execution environments (TEEs) such as Intel SGX or ARM TrustZone, memory protection and encryption, secure enclaves, and cryptographic protocols that keep data confidential while being processed. Related concepts include encryption in use (EiU), secure multiparty computation, and homomorphic encryption. Proper implementation typically involves complementary controls such as access management, auditing, and secure software practices.

Applications of the concept are discussed in cloud analytics, secure database queries on encrypted data, privacy-preserving data sharing, and other scenarios where data must be processed without leaking sensitive information. Usecured is generally used as a design objective or qualitative description rather than a formal standard.

Criticism and limitations center on its informal nature. Because the term lacks universal definition or certification, interpretations of what constitutes "usecured" can vary. Real-world protections during use often entail trade-offs among performance, complexity, and risk, and may require combining multiple technologies to achieve acceptable security guarantees.

See also: encryption in use, trusted execution environments, secure enclaves, secure multiparty computation, homomorphic encryption.