Specialisation
Deep focus in one particular area, usually built on a broader foundation.
Learn it through a story
- Capstone: Every Road Leads Through AppSec (Cybersecurity for Juniors 3, Ch 17)
Related terms
- Signature The part of a JWT that proves it wasn't tampered with after being issued, assuming the signing key stays secret.
- SOC (Security Operations Centre) A team that watches systems and networks for suspicious activity.
- Social engineering Tricking a person directly, often using trust, politeness or fear, instead of tricking a computer.
- Spoofing Faking a caller ID, sender name or address so it looks like it comes from somewhere trustworthy.
- STRIDE A six-question framework (Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege) for threat modeling.
- Threat modeling Systematically asking what could go wrong with a system, and for whom, before or while it's built.