Security
defense in depth
layered controls
Source board
This definition comes from the board below. Open it to see the term in context.
The Security MindsetSecurityAlso defined on Anatomy of a Breach.
More terms from this board
- assume breachdesign for a compromised layer
- attack surfaceall points an attacker can interact with
- authenticityprovably who they claim
- CIA triadconfidentiality (secret) / integrity (untampered) / availability (up)
- complete mediationcheck every access
- fail securedeny on error
- least privilegeminimum access needed
- no security through obscurity (Kerckhoffs)assume the design is known
- non-repudiationcan't deny you did it
- security mindsetthink like an attacker
- threat modelthe structured 'what can go wrong' at each trust boundary
- trust boundaryline between trust levels (validate crossings)