Information Security
Mamoona Jabbar
, Secure Design
The core pillars of information security:
Confidentiality – only allow access to data for which the user
is permitted
Integrity – ensure data is not tampered or altered by
unauthorized users
Availability – ensure systems and data are available to
authorized users when they need it
, Security Principles
The security principles outlined in Michael Howard and David
LeBlanc’s book Writing Secure Code
• Minimize attack surface area
• Establish secure defaults
• The principle of least privileges
• The principle of defence in depth
• Fail securely
• Don’t trust services
• Separation of duties
• Avoid security by obscurity
• Keep security simple
• Fix security issue correctly
Mamoona Jabbar
, Secure Design
The core pillars of information security:
Confidentiality – only allow access to data for which the user
is permitted
Integrity – ensure data is not tampered or altered by
unauthorized users
Availability – ensure systems and data are available to
authorized users when they need it
, Security Principles
The security principles outlined in Michael Howard and David
LeBlanc’s book Writing Secure Code
• Minimize attack surface area
• Establish secure defaults
• The principle of least privileges
• The principle of defence in depth
• Fail securely
• Don’t trust services
• Separation of duties
• Avoid security by obscurity
• Keep security simple
• Fix security issue correctly
