Security
complete mediation
check every access
Source board
This definition comes from the board below. Open it to see the term in context.
The Security MindsetSecurityAlso defined on Authorization and Identity.
More terms from this board
- assume breachdesign for a compromised layer
- attack surfaceall points an attacker can interact with
- authenticityprovably who they claim
- CIA triadconfidentiality (secret) / integrity (untampered) / availability (up)
- defense in depthlayered controls
- fail securedeny on error
- least privilegeminimum access needed
- no security through obscurity (Kerckhoffs)assume the design is known
- non-repudiationcan't deny you did it
- security mindsetthink like an attacker
- threat modelthe structured 'what can go wrong' at each trust boundary
- trust boundaryline between trust levels (validate crossings)