002 Security Design Principles and some other

002 Security Design Principles and some other

• 2.
  Security Design Principles •Security design principles are guidelines and best practices for designing secure systems, software, and infrastructure to protect against vulnerabilities, threats, and attacks. These principles ensure that security is embedded into the design process, rather than being added as an afterthought. They are widely used in cyber security, software development, and IT infrastructure planning to create systems that are robust, resilient, and trustworthy.
• 3.
  • Least Privilege Grantusers and systems only the permissions they need to perform their tasks. This minimizes the risk of misuse or exploitation of excess privileges. • Defense in Depth Use multiple layers of security controls so that if one defense mechanism fails, others remain in place to protect the system. • Separation of Duties Divide critical responsibilities among multiple individuals or systems to reduce the risk of insider threats or errors.
• 4.
  • Fail-Safe Defaults Configuresystems to deny access by default and allow access only when explicitly permitted. • Economy of Mechanism Keep designs simple and small to reduce complexity and the likelihood of errors or vulnerabilities. • Complete Mediation Ensure that every access request is validated and checked against access control policies to prevent unauthorized access.
• 5.
  • Open Design Avoidrelying on secrecy of design or implementation as the primary security measure. The design should remain secure even if it is fully disclosed. • Least Common Mechanism Minimize the sharing of components, systems, or resources to reduce the risk of unintended interactions and vulnerabilities. • Psychological Acceptability Ensure security measures are user-friendly and do not hinder usability. Complex or cumbersome security measures may lead to workarounds.
• 6.
  • Secure byDefault Design systems with secure configurations as the baseline, requiring intentional action to reduce security. • Compartmentalization Segment systems and networks to limit the spread of an attack or the impact of a breach. • Audit and Monitoring Implement logging, auditing, and monitoring to detect, analyze, and respond to security incidents promptly.
• 7.
  Applications • Software Development:Ensuring secure coding practices. • Network Security: Layered defense strategies like firewalls and intrusion detection. • System Architecture: Designing systems to prevent unauthorized access or minimize the impact of breaches.