security-patterns

SKILL.md

Security patterns and practices for building secure ABP Framework applications.

| Spoofing | Identity theft | Can attacker impersonate user? | Authentication, tokens | | Tampering | Data modification | Can attacker modify data? | Integrity checks, signing | | Repudiation | Denial of actions | Can user deny their actions? | Audit logging |

| Information Disclosure | Data exposure | Can attacker access sensitive data? | Encryption, access control | | Denial of Service | Availability attack | Can attacker disrupt service? | Rate limiting, scaling | | Elevation of Privilege | Unauthorized access | Can attacker gain higher privileges? | Authorization, least privilege |

Patrones de seguridad de aplicaciones web que incluyen modelado de amenazas STRIDE, cumplimiento OWASP Top 10, autorización ABP y procedimientos de auditoría de seguridad. Úselo cuando: (1) realice auditorías de seguridad, (2) implemente autenticación/autorización, (3) cree modelos de amenazas, (4) revise el código en busca de vulnerabilidades. Fuente: thapaliyabikendra/ai-artifacts.

Ver original