forked from security-alliance/frameworks
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathSUMMARY.md.develop
More file actions
170 lines (160 loc) · 10 KB
/
Copy pathSUMMARY.md.develop
File metadata and controls
170 lines (160 loc) · 10 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
# SUMMARY
- [Introduction to Frameworks](./intro/introduction.md)
- [How to Navigate the Website](./intro/how-to-navigate-the-website.md)
- [Overview of Each Framework](./intro/overview-of-each-framework.md)
# Frameworks
- [Community Management](./community-management/README.md)
- [Discord](./community-management/discord.md)
- [Twitter](./community-management/twitter.md)
- [Telegram](./community-management/telegram.md)
- [Google](./community-management/google.md)
- [Awareness](./awareness/README.md)
- [Core Awareness Principles](./awareness/core-awareness-principles.md)
- [Understanding Threat Vectors](./awareness/understanding-threat-vectors.md)
- [Cultivating a Security-Aware Mindset](./awareness/cultivating-a-security-aware-mindset.md)
- [Staying Informed & Continuous Learning](./awareness/staying-informed-and-continuous-learning.md)
- [Resources & Further Reading](./awareness/resources-and-further-reading.md)
- [Operational Security](./opsec/README.md)
- [Overview](./opsec/overview/README.md)
- [Security Fundamentals](./opsec/overview/security-fundamentals.md)
- [Implementation Process](./opsec/overview/implementation-process.md)
- [Web3 considerations](./opsec/overview/web3-considerations.md)
- [Threat Modeling Overview](./opsec/threat-modeling-overview.md)
- [Risk Management Overview](./opsec/risk-management-overview.md)
- [While Traveling](./opsec/travel/README.md)
- [Guide](./opsec/travel/guide.md)
- [TL;DR](./opsec/travel/tldr.md)
- [Governance & Program Management]()
- [Control Domains]()
- [Lifecycle]()
- [Monitoring & Detection]()
- [Incident Response & Recovery]()
- [Continuous Improvement & Metrics]()
- [Integration & Mapping to Other Frameworks]()
- [Appendices]()
- [Wallet Security](./wallet-security/README.md)
- [Custodial vs Non-Custodial](./wallet-security/custodial-vs-non-custodial.md)
- [Cold vs Hot Wallet](./wallet-security/cold-vs-hot-wallet.md)
- [Wallets For Beginners & Small Balances](./wallet-security/for-beginners-&-small-balances.md)
- [Wallets For Intermediates & Medium Funds ](./wallet-security/intermediates-&-medium-funds.md)
- [Multisig Wallets For Advanced Users & High Funds](./wallet-security/secure-multisig-best-practices.md)
- [Account Abstraction Wallets](./wallet-security/account-abstraction.md)
- [Signing & Verification](./wallet-security/signing-verification.md)
- [Verifying Standard Transactions (EOA)](./wallet-security/verifying-standard-transactions.md)
- [Multisig Signing Process](./wallet-security/secure-multisig-signing-process.md)
- [Using EIP-7702](./wallet-security/verifying-7702.md)
- [Private Key & Seed Phrase Management](./wallet-security/private-key-management.md)
- [Tools & Resources](./wallet-security/tools-&-resources.md)
- [External Security Reviews](./external-security-reviews/README.md)
- [Smart Contract Audits](./external-security-reviews/smart-contracts/README.md)
- [Manual Review](./external-security-reviews/smart-contracts/manual-review.md)
- [Expectations](./external-security-reviews/smart-contracts/expectation.md)
- [Preparation Guide](./external-security-reviews/smart-contracts/preparation.md)
- [Vendor Selection](./external-security-reviews/smart-contracts/vendor-selection.md)
- [Security Policies and Procedures](./external-security-reviews/security-policies-procedures.md)
- [Security Testing](./security-testing/README.md)
- [Dynamic Application Security Testing](./security-testing/dynamic-application-security-testing.md)
- [Fuzz Testing](./security-testing/fuzz-testing.md)
- [Security Regression Testing](./security-testing/security-regression-testing.md)
- [Static Application Security Testing](./security-testing/static-application-security-testing.md)
- [ENS](./ens/README.md)
- [Data Integrity & Verification](./ens/data-integrity-verification.md)
- [Cross-Chain Compatibility](./ens/cross-chain-compatibility.md)
- [Smart Contract Integration](./ens/smart-contract-integration.md)
- [Interface Compliance](./ens/interface-compliance.md)
- [Name Handling & Normalization](./ens/name-handling-normalization.md)
- [Safe Harbor](./safe-harbor/README.md)
- [Safe Harbor Eligibility Checklist](./safe-harbor/self-checklist.md)
- [Self-Adoption Guide](./safe-harbor/self-adoption-guide.md)
- [Safe Harbor Scope Terms](./safe-harbor/scope-terms.md)
- [On-Chain Adoption Guide](./safe-harbor/on-chain-adoption-guide.md)
- [Whitehat](./safe-harbor/whitehat.md)
<!-- From this way up, sync'd with main -->
<!-- From this way down, a lot of work is needed -->
- [Vulnerability Disclosure](./vulnerability-disclosure/README.md)
- [Security Contact](./vulnerability-disclosure/security-contact.md)
- [Bug Bounties](./vulnerability-disclosure/bug-bounties.md)
- [Infrastructure](./infrastructure/README.md)
- [Asset Inventory](./infrastructure/asset-inventory.md)
- [Cloud Infrastructure](./infrastructure/cloud.md)
- [DDoS Protection](./infrastructure/ddos-protection.md)
- [DNS and Domain Registration](./infrastructure/dns-and-domain-registration.md)
- [Identity and Access Management](./infrastructure/identity-and-access-management.md)
- [Network Security](./infrastructure/network-security.md)
- [Operating System Security](./infrastructure/operating-system-security.md)
- [Zero-Trust Principles](./infrastructure/zero-trust-principles.md)
- [Monitoring](./monitoring/README.md)
- [Guidelines](./monitoring/guidelines.md)
- [Thresholds](./monitoring/thresholds.md)
- [Front-End/Web Application](./front-end-web-app/README.md)
- [Web Application Security](./front-end-web-app/web-application-security.md)
- [Mobile Application Security](./front-end-web-app/mobile-application-security.md)
- [Common Vulnerabilities](./front-end-web-app/common-vulnerabilities.md)
- [Security Tools and Resources](./front-end-web-app/security-tools-resources.md)
- [Incident Management](./incident-management/README.md)
- [Communication Strategies](./incident-management/communication-strategies.md)
- [Incident Detection and Response](./incident-management/incident-detection-and-response.md)
- [Lessons Learned](./incident-management/lessons-learned.md)
- [Playbooks](./incident-management/playbooks.md)
- [SEAL 911 War Room Guidelines](./incident-management/seal-911-war-room-guidelines.md)
- [Decentralized Incident Response Framework (DeIRF)](./incident-management/decentralized-ir.md)
- [Threat Modeling](./threat-modeling/README.md)
- [Create and Maintain Threat Models](./threat-modeling/create-maintain-threat-models.md)
- [Identity Mitigate Threats](./threat-modeling/identity-mitigate-threats.md)
- [Governance](./governance/README.md)
- [Compliance with Regulatory Requirements](./governance/compliance-regulatory-requirements.md)
- [Risk Management](./governance/risk-management.md)
- [Security Metrics and KPIs](./governance/security-metrics-kpis.md)
- [DevSecOps](./devsecops/README.md)
- [Code Signing](./devsecops/code-signing.md)
- [Continuous Integration and Deployment](./devsecops/continuous-integration-continuous-deployment.md)
- [Integrated Development Environments](./devsecops/integrated-development-environments.md)
- [Repository Hardening](./devsecops/repository-hardening.md)
- [Security Testing](./devsecops/security-testing.md)
- [Privacy](./privacy/README.md)
- [Secure Browsing](./privacy/secure-browsing.md)
- [Data Removal Services](./privacy/data-removal-services.md)
- [Digital Footprint](./privacy/digital-footprint.md)
- [Encrypted Communication Tools](./privacy/encrypted-communication-tools.md)
- [Financial Privacy Services](./privacy/financial-privacy-services.md)
- [Privacy-Focused Operating Systems and Tools](./privacy/privacy-focused-operating-systems-tools.md)
- [VPN Services](./privacy/vpn-services.md)
- [Supply Chain](./supply-chain/README.md)
- [Dependency Awareness](./supply-chain/dependency-awareness.md)
- [Supply Chain Levels for Software Artifacts](./supply-chain/supply-chain-levels-software-artifacts.md)
- [Security Automation](./security-automation/README.md)
- [Threat Detection and Response](./security-automation/threat-detection-response.md)
- [Compliance Checks](./security-automation/compliance-checks.md)
- [Infrastructure as Code](./security-automation/infrastructure-as-code.md)
- [Identity and Access Management IAM](./iam/README.md)
- [Role-Based Access Control](./iam/role-based-access-control.md)
- [Secure Authentication](./iam/secure-authentication.md)
- [Access Management Best Practices](./iam/access-management.md)
- [Secure Software Development](./secure-software-development/README.md)
- [Secure Coding Standards Guidelines](./secure-software-development/secure-coding-standards-guidelines.md)
- [Code Reviews and Peer Audits](./secure-software-development/code-reviews-peer-audits.md)
- [Secure Code Repositories and Version Control](./secure-software-development/secure-code-repositories-version-control.md)
- [Threat Modeling and Secure Design Principles](./secure-software-development/threat-modeling-secure-design-principles.md)
- [Encryption](./encryption/README.md)
- [Cloud Data Encryption](./encryption/cloud-data-encryption.md)
- [Communication Encryption](./encryption/communication-encryption.md)
- [Database Encryption](./encryption/database-encryption.md)
- [Email Encryption](./encryption/email-encryption.md)
- [Encryption in Transit](./encryption/encryption-in-transit.md)
- [File Encryption](./encryption/file-encryption.md)
- [Full Disk Encryption](./encryption/full-disk-encryption.md)
- [Hardware Encryption](./encryption/hardware-encryption.md)
- [Partition Encryption](./encryption/partition-encryption.md)
- [Volume Encryption](./encryption/volume-encryption.md)
# About this
- [What It Is](./intro/what-is-it.md)
- [What It Isn't](./intro/what-it-isnt.md)
- [Contributing](./contribute/contributing.md)
- [Contributors](./contribute/contributors.md)
- [Stewards](./contribute/stewards.md)
# Practical Guides
<!-- - Step-by-step implementation — can be omitted
- Case studies — an idea -->
# Additional Resources
<!-- - Tools and software recommendations
- Further reading and references -->