Security
least privilege
minimum access needed
Source board
This definition comes from the board below. Open it to see the term in context.
The Security MindsetSecurityMore terms from this board
- assume breachdesign for a compromised layer
- attack surfaceall points an attacker can interact with
- authenticityprovably who they claim
- CIA triadconfidentiality (secret) / integrity (untampered) / availability (up)
- complete mediationcheck every access
- defense in depthlayered controls
- fail securedeny on error
- no security through obscurity (Kerckhoffs)assume the design is known
- non-repudiationcan't deny you did it
- security mindsetthink like an attacker
- threat modelthe structured 'what can go wrong' at each trust boundary
- trust boundaryline between trust levels (validate crossings)