Join our Newsletter — 33% off our NHI Course
Home› Glossary› Cyber Security› Deadlock
Cyber Security

Deadlock

← Back to Glossary
By NHI Mgmt Group Updated September 27, 2026 Domain: Cyber Security

A stalled condition where two sides wait on each other and no further progress is possible. In interactive test automation, deadlock often appears when a process blocks on input or fills an output pipe that the runner is not draining quickly enough.

What Deadlock Means in Computing and Workflow Coordination

Deadlock is a stalled state in which two or more parties each wait for the other to move first, so progress stops. In systems work, that usually means a process, thread, job, or runner is waiting on a resource that will not become available.

At a practical level, deadlock is about mutual dependency, not simple slowness. One component may hold a lock, buffer, socket, or input channel while waiting for another component to release something it needs in return.

How Deadlock Forms

Deadlock typically appears when several conditions line up: resources are held exclusively, they cannot be preempted, and each participant waits on a resource already held by another participant. Once that cycle exists, the system can remain stuck indefinitely unless something breaks the loop.

In software and automation, the pattern often emerges around locks, blocking I/O, queue backpressure, or orchestration steps that assume a response will arrive before a timeout or retry policy intervenes. A common test-automation example is a process that writes output faster than the runner reads it, then blocks when the pipe fills.

Deadlock differs from a temporary delay because the blocked participants are not merely slow, they are structurally unable to continue under the current conditions.

Why Deadlock Matters

Deadlock matters because it can freeze execution without producing a clean failure signal. A job may appear healthy from the outside while making no progress, which makes diagnosis harder and can consume capacity, stall release pipelines, or hold shared resources hostage.

In distributed or concurrent systems, deadlock can cascade into queue buildup, worker starvation, or service unavailability if blocked tasks prevent new work from starting. If the blocked path involves an external dependency, the stall can also mask where the real waiting point sits.

Deadlock is often confused with livelock, starvation, or a plain timeout. Livelock means the system is active but still not advancing. Starvation means one participant is repeatedly denied access. A timeout ends the wait, but a deadlock is the underlying circular dependency that can exist even before any timeout fires.

The distinction matters because the remedy changes. Deadlock calls for breaking circular waits or redesigning resource ordering, while starvation and timeout problems may need fairness controls, scheduling changes, or better failure handling.

Risk and Threat Considerations

Deadlock becomes a security and operational risk when blocked resources are scarce, shared, or business-critical. In test harnesses, build systems, service orchestration, and concurrency-heavy applications, a deadlock can create availability loss, hide failures, and consume capacity until operators intervene.

Failure mechanism: A cycle of waiting forms because each participant holds something the other needs, and neither side can proceed to release it.

Impact: The system can stall indefinitely, trigger cascading backlog, or force manual recovery that interrupts service or delivery workflows.

Standards & Framework Alignment

This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.

NIST CSF 2.0, NIST SP 800-53 Rev 5 and CIS Controls v8 set the governance and control requirements practitioners need to meet.

FrameworkControl / ReferenceRelevance
NIST CSF 2.0PR.PS-02 — Software, Services, and Systems Are ProtectedDeadlock affects software/service availability and runtime protection.
Recommendation — Design concurrent services to avoid blocking patterns that can stall protected system functions.
NIST SP 800-53 Rev 5SC-4 — Information in Shared System ResourcesDeadlock can arise from contention over shared resources and blocked system flows.
SI-4 — System MonitoringDeadlock often presents as stalled execution that requires operational detection.
Recommendation — Control shared-resource use so one blocked process cannot stall critical execution paths. Monitor for hung processes, blocked queues, and uncompleted jobs to detect deadlock early.
CIS Controls v8CIS-8 — Audit Log ManagementStalled automation and blocked jobs need visibility to support troubleshooting and recovery.
Recommendation — Preserve execution and error logs so you can trace the last successful step before a stall.

Practitioner Guidance

What to watch for: Treat repeated hangs, blocked workers, saturated pipes, and jobs that stop advancing without a clear error as deadlock signals. The useful question is not just whether something is slow, but whether progress depends on a resource that is already being held by the thing waiting for it.

Practitioner takeaway: Deadlock is usually prevented by design discipline, consistent lock ordering, bounded waits, and careful handling of blocking I/O and shared resources.

Deepen Your Knowledge

Sign up to our weekly newsletter — get 33% off our NHI Foundation Level Course

    NHIMG Editorial Note
    Reviewed and updated by the NHIMG editorial team on September 27, 2026.
    NHI Mgmt Group — the #1 independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org