Concepts

Security Concepts

Short, self-contained explanations of the ideas security work is built on - trust boundaries, cryptography, identity, threat modelling and more - graded by difficulty and reading time.

181
Concepts: 12
Categories: 47
Beginner: 44
Advanced

Refine the index

Search the collection, then narrow it by the fields below.

CIA Triad

DAD Triad

Fundamental Security Models

Defence-in-Depth

ISO/IEC 19249

Zero Trust

Trust but Verify

Threat

Risk

Shared Responsibility Model

AAA Framework

Authentication

Authorization

Non-repudiation

Least Privilege

Separation of Duties

Vulnerability

Exploit

Cyber Kill Chain

MITRE ATT&CK Framework

Indicators of Compromise (IoCs)

Security by Design

Attack Surface

Attack Vector

Encryption

Hashing

Symmetric Encryption

Asymmetric Encryption

Digital Signatures

Red Teaming

Blue Teaming

Purple Teaming

Penetration Testing

Ethical Hacking

White Hat Hacker

Black Hat Hacker

Red Hat Hacker

Vulnerability Assessment

Cybersecurity Ethics

Responsible Disclosure

Rules of Engagement

Bell-LaPadula Model

Biba Integrity Model

Clark-Wilson Model

Brewer and Nash Model

Goguen-Meseguer Model

Sutherland Model

Graham-Denning Model

Harrison-Ruzzo-Ullman Model

Domain Separation

Layering

Encapsulation

Redundancy

Virtualization

Least Privilege (ISO/IEC 19249)

Attack Surface Minimisation

Centralized Parameter Validation

Centralized General Security Services

Preparing for Error and Exception Handling

Fingerprinting

Reconnaissance

Dorking

Web Content Discovery

Incident Response

PKI - Public Key Infrastructure

Digital Certificates

Key Management

Threat Intelligence

Social Engineering

Security Metrics and KPIs

OSINT - Open Source Intelligence

Security Awareness

Zero Knowledge Proofs

SIEM - Security Information and Event Management

SOAR - Security Orchestration, Automation and Response

Threat Hunting

Threat Modeling

Attack Surface Management

DevSecOps

Privacy Engineering