Security
9 boards, 19 lessons, 157 review questions and 1 narrated videos, in 1 chapter. Read them in order. Each chapter builds on the one before.
Your progress0 of 19 read
Start here → The Security Mindset
Contents
1Think Like an Attacker19 lessons
The attacker's half of engineering - cryptography, authn/authz, web vulnerabilities and hardening - ending where the injection pattern meets the agent loop.
- 01The Security Mindset9 Q
- 02Cryptography Foundations9 Q
- 03Authentication9 Q
- 04Authorization & Identity9 Q
- 05Whose page is this? (the browser security model)8 Q
- 06The badge you cannot take back (the session lifecycle)7 Q
- 07Web Vulnerabilities (the OWASP classics)9 Q
- 08Transport & Network Security10 Q
- 09Application Hardening9 Q
- 10The key that has to change (secrets and key management)7 Q
- 11Review the fix (secure code review)12 Q
- 12The door you forgot was a door (fail-open checks and logic bugs)7 Q
- 13The thing you let in (deserialization and file uploads)7 Q
- 14Anatomy of a Breach8 Q
- 15LLM & Agent Security8 Q
- 16A shop built to be broken (OWASP Juice Shop practice)7 Q
- 17The shop you secure (defence in a real app)8 Q
- 18The trace you would actually see (detection and the first hour)7 Q
- 19The risk register (security as a programme)7 Q
Borrowed from other tracks (6)
You don't need to take those tracks. These are the only lessons this track uses from them, and each is linked where it is needed.
- How Code Becomes Execution (compilers, stack & heap)How Computers Work · needed for The Security Mindset
- Concurrency & the HardwareHow Computers Work · needed for The Security Mindset
- The whisper code (how a call goes private)Networking · needed for Transport & Network Security
- Agents & Tool UseAI · needed for LLM & Agent Security
- Running a Container for RealDevOps · needed for A shop built to be broken (OWASP Juice Shop practice)
- What a request actually says (HTTP)Networking · needed for Whose page is this? (the browser security model)