security-patterns

SKILL.md

Security patterns and practices for building secure ABP Framework applications.

| Spoofing | Identity theft | Can attacker impersonate user? | Authentication, tokens | | Tampering | Data modification | Can attacker modify data? | Integrity checks, signing | | Repudiation | Denial of actions | Can user deny their actions? | Audit logging |

| Information Disclosure | Data exposure | Can attacker access sensitive data? | Encryption, access control | | Denial of Service | Availability attack | Can attacker disrupt service? | Rate limiting, scaling | | Elevation of Privilege | Unauthorized access | Can attacker gain higher privileges? | Authorization, least privilege |

Web application security patterns including STRIDE threat modeling, OWASP Top 10 compliance, ABP authorization, and security audit procedures. Use when: (1) conducting security audits, (2) implementing authentication/authorization, (3) creating threat models, (4) reviewing code for vulnerabilities. Source: thapaliyabikendra/ai-artifacts.

View raw