security-engineering-wiki
Retrieve security engineering wiki concepts. Use when the question is about security engineering: Threat modelling; Secure-design principles; Identity, authentication and authorisation as design concepts; Vulnerability classes as concepts; Security and reliability as related system properties; Security assurance practice; Machine-agent identity and delegated authority; The LLM/agent threat surface as a vulnerability-class family. Scan concepts.json in this skill folder. Read only matching notes. Follow basename links hop by hop. Do not load every note. Do not answer from fleeting/ notes.
Pinned to revision 846c7b7891a5, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/security-engineering-wiki/SKILL.md
- skills/security-engineering-wiki/access-classification-by-risk.md
- skills/security-engineering-wiki/architecture-for-change.md
- skills/security-engineering-wiki/assessing-attacker-risk.md
- skills/security-engineering-wiki/attack-surface-minimization.md
- skills/security-engineering-wiki/attack-trees.md
- skills/security-engineering-wiki/attacker-ejection.md
- skills/security-engineering-wiki/attacker-motivations.md
- skills/security-engineering-wiki/attacker-profiles.md
- skills/security-engineering-wiki/attacker-ttps.md
- skills/security-engineering-wiki/audit-log-design.md
- skills/security-engineering-wiki/authorization-policy-framework.md
- skills/security-engineering-wiki/avoid-wall-clock-dependencies.md
- skills/security-engineering-wiki/backup-and-restore-integrity.md
- skills/security-engineering-wiki/breakglass.md
- skills/security-engineering-wiki/cia-triad.md
- skills/security-engineering-wiki/cloud-provider-trust-boundary.md
- skills/security-engineering-wiki/cloud-shared-responsibility-model.md
- skills/security-engineering-wiki/code-simplicity-for-security.md
- skills/security-engineering-wiki/compartmentalization.md
- skills/security-engineering-wiki/compliance-control-cultural-cost.md
- skills/security-engineering-wiki/component-reliability-tiers.md
- skills/security-engineering-wiki/concepts.json
- skills/security-engineering-wiki/confused-deputy.md
- skills/security-engineering-wiki/continuous-validation.md
- skills/security-engineering-wiki/credential-rotation.md
- skills/security-engineering-wiki/cyber-kill-chain.md
- skills/security-engineering-wiki/data-minimization.md
- skills/security-engineering-wiki/debugging-access-security.md
- skills/security-engineering-wiki/debugging-vs-security-investigation.md
- skills/security-engineering-wiki/decouple-rollout-speed-from-policy.md
- skills/security-engineering-wiki/defense-in-depth.md
- skills/security-engineering-wiki/defensive-prompt-engineering.md
- skills/security-engineering-wiki/delivery-pipeline-separation-of-duties.md
- skills/security-engineering-wiki/design-for-changing-landscape.md
- skills/security-engineering-wiki/design-for-recovery.md
- skills/security-engineering-wiki/design-for-resilience.md
- skills/security-engineering-wiki/design-for-understandability.md
- skills/security-engineering-wiki/detection-architecture-patterns.md
- skills/security-engineering-wiki/diagnosing-access-denials.md
- skills/security-engineering-wiki/digital-forensics.md
- skills/security-engineering-wiki/digital-signatures-for-request-authentication.md
- skills/security-engineering-wiki/dos-defense-in-depth.md
- skills/security-engineering-wiki/dos-mitigation-response.md
- skills/security-engineering-wiki/dread-risk-scoring.md
- skills/security-engineering-wiki/emergency-access.md
- skills/security-engineering-wiki/encryption-baseline-controls.md
- skills/security-engineering-wiki/explicit-revocation.md
- skills/security-engineering-wiki/fail-safe-vs-fail-secure.md
- skills/security-engineering-wiki/failure-domains.md
- skills/security-engineering-wiki/fencing-tokens.md
- skills/security-engineering-wiki/fuzz-testing.md
- skills/security-engineering-wiki/graceful-degradation.md
- skills/security-engineering-wiki/graduated-policy-enforcement.md
- skills/security-engineering-wiki/incident-operational-security.md
- skills/security-engineering-wiki/initial-vs-sustained-velocity.md
- skills/security-engineering-wiki/insider-risk.md
- skills/security-engineering-wiki/intended-state-recovery.md
- skills/security-engineering-wiki/least-privilege.md
- skills/security-engineering-wiki/location-separation.md
- skills/security-engineering-wiki/mandatory-access-control.md
- skills/security-engineering-wiki/memory-safety.md
- skills/security-engineering-wiki/multi-party-authorization.md
- skills/security-engineering-wiki/network-exposure-misconfiguration.md
- skills/security-engineering-wiki/nonrepudiation.md
- skills/security-engineering-wiki/offloading-sensitive-data.md
- skills/security-engineering-wiki/quantum-threat-to-cryptography.md
- skills/security-engineering-wiki/red-team-testing.md
- skills/security-engineering-wiki/request-authentication-properties.md
- skills/security-engineering-wiki/request-fingerprinting.md
- skills/security-engineering-wiki/role-separation.md
- skills/security-engineering-wiki/rollback-security-tradeoff.md
- skills/security-engineering-wiki/root-key-isolation.md
- skills/security-engineering-wiki/safe-proxies.md
- skills/security-engineering-wiki/safe-types.md
- skills/security-engineering-wiki/secret-leakage-through-derived-artifacts.md
- skills/security-engineering-wiki/secretless-authorization.md
- skills/security-engineering-wiki/secrets-in-version-control.md
- skills/security-engineering-wiki/secure-by-construction-frameworks.md
- skills/security-engineering-wiki/secure-cryptographic-apis.md
- skills/security-engineering-wiki/security-architecture-view.md
- skills/security-engineering-wiki/security-change-rollout.md
- skills/security-engineering-wiki/security-crisis-management.md
- skills/security-engineering-wiki/security-design-review.md
- skills/security-engineering-wiki/security-incident-recovery.md
- skills/security-engineering-wiki/security-invariants.md
- skills/security-engineering-wiki/security-log-design.md
- skills/security-engineering-wiki/security-postmortem.md
- skills/security-engineering-wiki/security-reliability-intersection.md
- skills/security-engineering-wiki/security-telemetry-visibility.md
- skills/security-engineering-wiki/security-theater-vs-genuine-practice.md
- skills/security-engineering-wiki/session-token-security.md
- skills/security-engineering-wiki/shift-left-security.md
- skills/security-engineering-wiki/small-functional-apis.md
- skills/security-engineering-wiki/social-engineering-verification.md
- skills/security-engineering-wiki/soft-deletion-recovery-window.md
- skills/security-engineering-wiki/sql-injection.md
- skills/security-engineering-wiki/static-analysis-for-security.md
- skills/security-engineering-wiki/stride-threat-classification.md
- skills/security-engineering-wiki/strong-domain-types.md
- skills/security-engineering-wiki/structured-justification.md
- skills/security-engineering-wiki/supply-chain-compromise.md
- skills/security-engineering-wiki/system-identities.md
- skills/security-engineering-wiki/temporary-access.md
- skills/security-engineering-wiki/testing-for-security.md
- skills/security-engineering-wiki/testing-least-privilege.md
- skills/security-engineering-wiki/threat-intelligence.md
- skills/security-engineering-wiki/three-factor-authorization.md
- skills/security-engineering-wiki/trust-segmentation.md
- skills/security-engineering-wiki/trusted-computing-base.md
- skills/security-engineering-wiki/understandable-interfaces.md
- skills/security-engineering-wiki/unused-permission-revocation.md
- skills/security-engineering-wiki/verify-artifacts-not-people.md
- skills/security-engineering-wiki/vulnerability-reward-programs.md
- skills/security-engineering-wiki/zero-day-vulnerability-response.md
- skills/security-engineering-wiki/zero-trust-networking.md
Every link opens the file at its source, pinned to the revision this page describes.