Security: Think Like an Attacker

Core Principle

Defense in Depth + Least Privilege. Layer multiple controls. Grant minimum permissions. Assume every layer can fail.

Security Mindset

Six Questions (Every Feature)

1. Who can access this? (Authentication)
2. Are they allowed to? (Authorization)
3. Can they see more than they should? (Data exposure)
4. Can they do more than they should? (Privilege escalation)
5. Can they break it for others? (Denial of service)
6. Will we know if they do? (Audit logging)