33 items
Security by Design and Shift-Left
Exploit vs Payload
Authentication vs Authorization
Attack Surface Basics
Trust Boundaries and Untrusted Input
Defense in Depth
Security in the SDLC
The CIA Triad
OWASP Top 10 Overview
Non-Repudiation and Accountability
Vulnerability, Threat, and Risk
What Is Application Security?
Principle of Least Privilege
Encryption vs Hashing vs Encoding
Attacker Motivations and Threat Actors
AppSec vs Network Security
Never Trust User Input
OWASP and the OWASP Top 10
Fail Securely and Secure Defaults
Attack Surface
Non-repudiation and Accountability
Encryption at Rest vs in Transit
Shift-Left Security
Trust Boundaries
Threat Actors and Motivations
Security by Design vs Bolt-on
What Is an Exploit
What Is Application Security
Defense in depth uses multiple layered security controls.
What does defense in depth mean?