Lesson 1.3
Secure defaults and least privilege
Most breaches exploit something that was left open rather than something clever. Default deny, then grant the narrow thing that is needed.
4mIntermediate11,899 students
Sign in to watch this lesson
Browsing is free. Create an account to play videos and track your progress.
Overview
Most breaches exploit something that was left open rather than something clever. Default deny, then grant the narrow thing that is needed.
What this lesson covers
- Default to deny and grant explicitly
- Scope credentials to the minimum they need
- Reduce attack surface by removing unused paths
This lesson sits in Thinking About Threats, part of Practical Web Security. It assumes what came before it and leads directly into the next lesson in the module.
In this lesson you will:
- Default to deny and grant explicitly
- Scope credentials to the minimum they need
- Reduce attack surface by removing unused paths