Security
threat model
the structured 'what can go wrong' at each trust boundary
Source board
This definition comes from the board below. Open it to see the term in context.
The Security MindsetSecurityMore terms from this board
- assume breachdesign for a compromised layer
- attack surfaceall points an attacker can interact with
- authenticityprovably who they claim
- CIA triadconfidentiality (secret) / integrity (untampered) / availability (up)
- complete mediationcheck every access
- defense in depthlayered controls
- fail securedeny on error
- least privilegeminimum access needed
- no security through obscurity (Kerckhoffs)assume the design is known
- non-repudiationcan't deny you did it
- security mindsetthink like an attacker
- trust boundaryline between trust levels (validate crossings)