Differences

This shows you the differences between two versions of the page.

--- kb:bestpractices:codingconventions:cybersecurity [2026/06/25 10:11] – joerg.hampel
+++ kb:bestpractices:codingconventions:cybersecurity [2026/10/06 13:16] (current) – joerg.hampel
@@ Line 1: / Line 1: @@
-====== 08 Cybersecurity ======
+====== 09 Cybersecurity ======
 <WRAP left round tip 60%>
-[[kb:bestpractices:wow:methodology#security_by_design|Security by Design]] is one of the guiding principles here at HSE.
+**[[kb:bestpractices:wow:methodology#security_by_design|Security by Design]] is one of the guiding principles here at HSE.**
 </WRAP>
@@ Line 10: / Line 10: @@
   * Prefer simple and explicit architectures
   * Fail safely and log security-relevant failures (log level WARNING)
-  * Minimize attack surface and unnecessary dependencies
+  * Minimize the attack surface by exposing only the functionality that is actually required
+  * Keep third-party dependencies as few as possible and up to date
   * Apply the principle of least privilege (both when developing and in the final product)
   * Do not reinvent the wheel (use existing encryption algorithms etc)
+  * Review security implications during code reviews and design reviews, not only during testing
 ===== Secrets and Credentials =====
+  * Choose secure defaults
   * Never hardcode:
     * passwords
@@ Line 123: / Line 126: @@
 |< 100% 50% >|
-|[[kb:bestpractices:codingconventions:networking|<< 07 Networking]]  |  [[kb:bestpractices:codingconventions:dqmh|11 DQMH >>]]|
+|[[kb:bestpractices:codingconventions:database|<< 08 Databases]]  |  [[kb:bestpractices:codingconventions:sharedlibraries|11 Shared Libraries (DLLs) >>]]|