Security engineering applies engineering discipline to protecting systems from unauthorized access, data breaches, and service disruption. Security must be designed in from the start — retrofitting security is expensive and incomplete.
Overview
mindmap
root((Security\nEngineering))
Security Principles
Defense in Depth
Least Privilege
Zero Trust
Secure by Default
Fail Secure
Separation of Duties
Authentication and Authorization
Password Hashing
Multi-Factor Authentication
OAuth 2.0 and OIDC
JWT Tokens
RBAC and ABAC
API Keys
Application Security
OWASP Top 10
Input Validation
SQL Injection
XSS and CSRF
Dependency Scanning
SAST and DAST
Infrastructure Security
Network Segmentation
Secrets Management
mTLS
WAF
DDoS Protection
Security Groups
Topics in This Section
| File | Topic | Key Concepts |
|---|---|---|
| 01_security_principles.md | Security Principles | Defense in depth, zero trust, least privilege |
| 02_authentication_authorization.md | AuthN & AuthZ | OAuth 2.0, OIDC, JWT, RBAC, ABAC |
| 03_application_security.md | Application Security | OWASP Top 10, injection, XSS |
| 04_infrastructure_security.md | Infrastructure Security | Secrets management, WAF, network segmentation |