Security
Authentication, encryption, network security, application security, and secure system design.
Security
Authentication, encryption, network security, application security, and secure system design.
Authentication & Authorization Models
Understand user identity and access control — password auth, JWT, OAuth2, SAML, RBAC, and modern auth protocols.
Identity & Access Management Patterns
RBAC vs ABAC, SCIM, OAuth scopes, OIDC flows, JWT validation pitfalls, token replay — the implementation patterns behind the auth models topic.
Cryptography & Encryption Basics
Cover the essential cryptographic primitives — symmetric and asymmetric encryption, hashing, digital signatures, and TLS.
Network Security & Firewalls
Deepen network security knowledge — firewall rules, security groups, network ACLs, WAFs, DDoS protection, and zero-trust architectures.
Secure System Design Principles
Apply security-by-design principles — threat modeling, least privilege, defense in depth, secrets management, and security reviews.
Threat Modeling (STRIDE, DREAD, Attack Trees)
Threat modeling as a practiced skill — STRIDE per element, DREAD for ranking, attack trees for adversary reasoning, and the data-flow diagram as the working surface.
Application Security (OWASP & Secure Coding)
Defense at the source — the OWASP Top 10, input validation, injection, XSS, CSRF, insecure deserialization, and the secure-coding habits that prevent vulnerabilities before they ship.
Supply Chain Security
The software supply chain is now an attack surface — SBOMs, signed artifacts, Sigstore/Cosign, dependency vetting, and SLSA as the maturity ladder.