Principle of Least Privilege

Security by Design and Shift-Left

Attacker Motivations and Threat Actors

Trust Boundaries and Untrusted Input

Security in the SDLC

Encryption vs Hashing vs Encoding

What Is Application Security?

Vulnerability, Threat, and Risk

Exploit vs Payload

OWASP Top 10 Overview

Defense in Depth

Non-Repudiation and Accountability

The CIA Triad

Attack Surface Basics

Authentication vs Authorization

Encryption at Rest vs in Transit

The CIA Triad

Non-repudiation and Accountability

Vulnerability, Threat, and Risk

AppSec vs Network Security

Attack Surface

Authentication vs Authorization

Fail Securely and Secure Defaults

Shift-Left Security

Never Trust User Input

Defense in Depth

Principle of Least Privilege

Threat Actors and Motivations

What Is an Exploit

What Is Application Security

OWASP and the OWASP Top 10

Security by Design vs Bolt-on

Trust Boundaries