Security and privacy¶
All topics · Alphabetical index
Concepts¶
- Threat modeling; attack surface; trust boundary
- Least privilege; defense in depth; zero trust
- Authentication; authorization; accounting; RBAC; ABAC; ReBAC
- OAuth 2.0; OpenID Connect; PKCE
- Sessions; JWT; refresh tokens; revocation
- CSRF; XSS; SQL injection; command injection
- SSRF; path traversal; insecure deserialization; IDOR; BOLA
- Password hashing; salts; key derivation
- TLS; encryption at rest; envelope encryption; key rotation
- Secrets management; certificate rotation; workload identity
- Tenant isolation; row-level security; audit trails
- Data minimization; pseudonymization; anonymization; re-identification
- SBOM; dependency vulnerabilities; artifact signing; sandboxing
Further reading¶
Reference links for this topic.