Security
security mindset
think like an attacker
Source board
This definition comes from the board below. Open it to see the term in context.
The Security MindsetSecurityMore terms from this board
- assume breachdesign for a compromised layer
- attack surfaceall points an attacker can interact with
- authenticityprovably who they claim
- CIA triadconfidentiality (secret) / integrity (untampered) / availability (up)
- complete mediationcheck every access
- defense in depthlayered controls
- fail securedeny on error
- least privilegeminimum access needed
- no security through obscurity (Kerckhoffs)assume the design is known
- non-repudiationcan't deny you did it
- threat modelthe structured 'what can go wrong' at each trust boundary
- trust boundaryline between trust levels (validate crossings)