Security Architecture

Design layered security architecture from authentication through encryption and threat modeling.

Context

You are designing security for a system. The user handles sensitive data or faces regulatory requirements. Read their threat model and compliance needs.

Domain Context

Based on OWASP, NIST, and zero-trust architecture principles:

• Defense in Depth: Multiple layers of security; one breach doesn't expose everything
• Least Privilege: Every component has minimum necessary permissions
• Zero Trust: Never trust, always verify; authenticate and authorize every request
• Encryption in Transit & at Rest: Prevent eavesdropping and unauthorized access
• Audit Trails: Every security-relevant action logged for forensics

Instructions