Security foundations
Core concepts: risk, trust boundaries, threat modeling, and HTTP basics.
- 001 Security goals and tradeoffs Learn Security goals and tradeoffs through a safe, repeatable security foundations workflow.
- 002 Assets, threats, and controls Learn Assets, threats, and controls through a safe, repeatable security foundations workflow.
- 003 Trust boundaries in applications Learn Trust boundaries in applications through a safe, repeatable security foundations workflow.
- 004 HTTP request and response anatomy Learn HTTP request and response anatomy through a safe, repeatable security foundations workflow.
- 005 Same-origin policy fundamentals Learn Same-origin policy fundamentals through a safe, repeatable security foundations workflow.
- 006 Threat modeling a small web app Learn Threat modeling a small web app through a safe, repeatable security foundations workflow.
- 007 Risk, likelihood, and impact Learn Risk, likelihood, and impact through a safe, repeatable security foundations workflow.
- 008 Input validation vs output encoding Learn Input validation vs output encoding through a safe, repeatable security foundations workflow.
- 009 Authentication vs authorization Learn Authentication vs authorization through a safe, repeatable security foundations workflow.
- 010 Reading security advisories Learn Reading security advisories through a safe, repeatable security foundations workflow.
- 011 CIA triad in practical testing Learn CIA triad in practical testing through a safe, repeatable security foundations workflow.
- 012 Threat actors, capabilities, and intent Learn Threat actors, capabilities, and intent through a safe, repeatable security foundations workflow.
- 013 Attack trees for small systems Learn Attack trees for small systems through a safe, repeatable security foundations workflow.
- 014 Data flow diagrams for web apps Learn Data flow diagrams for web apps through a safe, repeatable security foundations workflow.
- 015 Abuse cases and misuse cases Learn Abuse cases and misuse cases through a safe, repeatable security foundations workflow.
- 016 Security requirements from user stories Learn Security requirements from user stories through a safe, repeatable security foundations workflow.
- 017 Defense in depth as a testing lens Learn Defense in depth as a testing lens through a safe, repeatable security foundations workflow.
- 018 Secure defaults and fail closed behavior Learn Secure defaults and fail closed behavior through a safe, repeatable security foundations workflow.
- 019 Logging, monitoring, and evidence Learn Logging, monitoring, and evidence through a safe, repeatable security foundations workflow.
- 020 Vulnerability lifecycle basics Learn Vulnerability lifecycle basics through a safe, repeatable security foundations workflow.
- 021 CVSS and severity caveats Learn CVSS and severity caveats through a safe, repeatable security foundations workflow.
- 022 Reading OWASP Top 10 with context Learn Reading OWASP Top 10 with context through a safe, repeatable security foundations workflow.
- 023 Reading CWE entries Learn Reading CWE entries through a safe, repeatable security foundations workflow.
- 024 Security boundaries in browsers Learn Security boundaries in browsers through a safe, repeatable security foundations workflow.
- 025 Security boundaries in operating systems Learn Security boundaries in operating systems through a safe, repeatable security foundations workflow.