课程: Programming Foundations: Web Security

今天就学习课程吧！

今天就开通帐号，24,600 门业界名师课程任您挑！

Security through obscurity

Security through obscurity

课程: Programming Foundations: Web Security

开始一个月试用 购买团队方案

Security through obscurity

“

- Security through obscurity is our next core security principle. It has a nice rhyme to it. It means that it's more secure to withhold or obscure information 'cause information is valuable to an attacker. Learning new information benefits an attacker. It never benefits a defender. Therefore, the less information you give out, the better. Information should be kept on a need to know basis. It's similar to the principle of least privilege that we saw earlier. Give out the least amount of information necessary to complete the job. Most Hollywood heist films have a scene where the heroes perform some reconnaissance on their target. They watch the outside of the building through binoculars. They wait patiently as key personnel come and go so they can create a schedule of their daily routine. They photograph the security guards. They make maps and note the locations of security cameras. When hackers perform reconnaissance…

内容