Security by Design and Shift-Left

Exploit vs Payload

Authentication vs Authorization

Attack Surface Basics

Trust Boundaries and Untrusted Input

Defense in Depth

Security in the SDLC

The CIA Triad

OWASP Top 10 Overview

Non-Repudiation and Accountability

Vulnerability, Threat, and Risk

What Is Application Security?

Principle of Least Privilege

Encryption vs Hashing vs Encoding

Attacker Motivations and Threat Actors

AppSec vs Network Security

Never Trust User Input

Vulnerability, Threat, and Risk

OWASP and the OWASP Top 10

Fail Securely and Secure Defaults

Defense in Depth

Attack Surface

Non-repudiation and Accountability

Encryption at Rest vs in Transit

Shift-Left Security

Principle of Least Privilege

Trust Boundaries

Threat Actors and Motivations

Security by Design vs Bolt-on

Authentication vs Authorization

What Is an Exploit

What Is Application Security

The CIA Triad