174 lines (165 loc) · 10.5 KB

SUMMARY

Frameworks

Community Management
- Discord
- Twitter
- Telegram
- Google
Awareness
- Core Awareness Principles
- Understanding Threat Vectors
- Cultivating a Security-Aware Mindset
- Staying Informed & Continuous Learning
- Resources & Further Reading
Operational Security
- Overview
- Threat Modeling Overview
- Risk Management Overview
- While Traveling
  - Guide
  - TL;DR
- Governance & Program Management
- Control Domains
- Lifecycle
- Monitoring & Detection
- Incident Response & Recovery
- Continuous Improvement & Metrics
- Integration & Mapping to Other Frameworks
- Appendices
Wallet Security
- Custodial vs Non-Custodial
- Cold vs Hot Wallet
- Wallets For Beginners & Small Balances
- Wallets For Intermediates & Medium Funds
- Multisig Wallets For Advanced Users & High Funds
- Account Abstraction Wallets
- Signing & Verification
- Private Key & Seed Phrase Management
- Tools & Resources
External Security Reviews
- Smart Contract Audits
- Security Policies and Procedures
Vulnerability Disclosure
- Security Contact
- Bug Bounties
Infrastructure
- Asset Inventory
- Cloud Infrastructure
- DDoS Protection
- DNS and Domain Registration
- Identity and Access Management
- Network Security
- Operating System Security
- Zero-Trust Principles
Monitoring
- Guidelines
- Thresholds
Front-End/Web Application
- Web Application Security
- Mobile Application Security
- Common Vulnerabilities
- Security Tools and Resources
Incident Management
- Communication Strategies
- Incident Detection and Response
- Lessons Learned
- Playbooks
- SEAL 911 War Room Guidelines
Threat Modeling
- Create and Maintain Threat Models
- Identity Mitigate Threats
Insider Threats
- General Information
- Techniques, Tactics and Procedures
- Mitigating DPRK IT Workers
- Case Studies
- Summary
Governance
- Compliance with Regulatory Requirements
- Risk Management
- Security Metrics and KPIs
DevSecOps
- Code Signing
- Continuous Integration and Deployment
- Integrated Development Environments
- Repository Hardening
- Security Testing
Privacy
- Secure Browsing
- Data Removal Services
- Digital Footprint
- Encrypted Communication Tools
- Financial Privacy Services
- Privacy-Focused Operating Systems and Tools
- VPN Services
Supply Chain
- Dependency Awareness
- Supply Chain Levels for Software Artifacts
Security Automation
- Threat Detection and Response
- Compliance Checks
- Infrastructure as Code
Identity and Access Management IAM
- Role-Based Access Control
- Secure Authentication
- Access Management Best Practices
Secure Software Development
- Secure Coding Standards Guidelines
- Code Reviews and Peer Audits
- Secure Code Repositories and Version Control
- Threat Modeling and Secure Design Principles
Security Testing
- Unit Testing
- Integration Testing
- Fuzz Testing
- Static Analysis
- Formal Verification
- Mutation Testing
ENS
- Data Integrity & Verification
- Cross-Chain Compatibility
- Smart Contract Integration
- Interface Compliance
- Name Handling & Normalization
Safe Harbor
- Safe Harbor Eligibility Checklist
- Self-Adoption Guide
- Safe Harbor Scope Terms
- On-Chain Adoption Guide
- Whitehat
Encryption
- Cloud Data Encryption
- Communication Encryption
- Database Encryption
- Email Encryption
- Encryption in Transit
- File Encryption
- Full Disk Encryption
- Hardware Encryption
- Partition Encryption
- Volume Encryption

About this

Practical Guides

Additional Resources