Please enable JavaScript.
Coggle requires JavaScript to display documents.
Secure architecture review (acknowledges that bugs invariably exist…
Secure architecture review
acknowledges that bugs invariably exist
seek to limit impact and value
minimise damage
component compromised
assume compromised
determine what attacker can directly reach
accessible data needs to be present
maximize isolation
split up webserver and database
use docker
multi-tenant systems
own database and credentials
secure password storage
credentials
never be stored in plaintext/hased
stored
BCrypt
SCrypt
resillent password hashing algorithms
least privilege state
Auditability
understand what has been accessed
logged
requests causing internal server errors
query failures
commands being run as web/database users
attempted outgoing connections from servers