Confidentiality integrity availability Least privilege Defense in depth Zero trust concept Threat vulnerability risk Attack surface Security control types Asset classification Threat modeling Security by design

Authentication versus authorization Password hashing Multi-factor authentication Session management Role-based access control Attribute-based access control OAuth 2 concept OpenID Connect concept API key handling Secrets management

Symmetric encryption Asymmetric encryption Hash functions HMAC Digital signatures Password salting Key derivation Random number generation Certificate chain Key rotation

SQL injection prevention Cross-site scripting prevention CSRF protection Content Security Policy Secure cookies HTTP security headers Input validation Output encoding File upload validation Rate limiting

Firewall allowlist Network segmentation VPN concept TLS inspection caveat DNS security Secure Wi-Fi configuration Port exposure review IDS concept IPS concept DDoS mitigation concept

Dependency pinning Software composition analysis Static analysis Dynamic analysis Secret scanning Secure code review Parameter validation Safe error handling Logging without secrets Security unit tests

Patch management Baseline hardening Backup encryption Cloud IAM least privilege Security groups Object storage access Container image scanning Kubernetes secret handling Audit logging Time synchronization

Centralized logging Security event correlation Failed login alert Incident triage Containment Evidence preservation IOC concept Vulnerability scanning Risk-based remediation Post-incident review