Security
no security through obscurity (Kerckhoffs)
assume the design is known
Source board
This definition comes from the board below. Open it to see the term in context.
The Security MindsetSecurityMore terms from this board
- assume breachdesign for a compromised layer
- attack surfaceall points an attacker can interact with
- authenticityprovably who they claim
- CIA triadconfidentiality (secret) / integrity (untampered) / availability (up)
- complete mediationcheck every access
- defense in depthlayered controls
- fail securedeny on error
- least privilegeminimum access needed
- non-repudiationcan't deny you did it
- security mindsetthink like an attacker
- threat modelthe structured 'what can go wrong' at each trust boundary
- trust boundaryline between trust levels (validate crossings)