المراجعات الأمنية
في هذه الصفحة 9 موضوعات
نص الدروس والتمارين باللغة الإنجليزية، بينما تبقى واجهة الموقع وعناوين الدروس بالعربية.
نظرة عامة
الموضوعات
- نمذجة التهديدات (Threat modeling)
- حدود التفويض
- مراجعات التصميم الآمن
تعلّم أولًا
3.5 ساعة تدريب (تقدير)
مخرجات التعلم
- Lead a secure design review using a threat model and a checklist adapted to the system.
- Verify authorization boundaries end to end, including service-to-service and data access paths.
- Assess risk (likelihood × impact) and agree mitigations or accepted risks with owners.
- Work with a security team as a peer, not a gate.
الدروس
المختبر والتمارين
Lab
SRC-018-LAB1 · Secure design review
Outcomes: 1–4 · Time: ~3.5 h Review a peer's redesign: data flow diagram with trust boundaries, threat list, authorization matrix across all paths, rated findings, and agreed actions with owners. Present to the peer and a role-played security lead. Acceptance: review accepted by the peer and a role-played security lead.
Exercises (assessment: review-quality rubric)
| ID | Outcome | Task |
|---|---|---|
| SRC-018-EX01 | 1 | Draw the data flow and trust boundaries for orders, payments, and Kafka; list five threats with STRIDE categories. |
| SRC-018-EX02 | 1 | Adapt a generic checklist for a payment-handling, multi-tenant subsystem: choose ten items and explain the adaptation. |
| SRC-018-EX03 | 2 | Build an authorization matrix for six access paths to order data and write negative tests. |
| SRC-018-EX04 | 3 | Rate three findings by likelihood and impact, choose responses, and write an acceptance record for one. |
| SRC-018-EX05 | 4 | Case: the security lead rejects your design late. Write your response and working agreement for next time. |
| SRC-018-EX06 | 2 | Case: internal endpoint /internal/orders/{id} trusts any service in the cluster. Explain the risk and fix. |
أظهر الحلول
- EX01 Boundaries at gateway and provider; threats such as spoofing a service caller, tampering with events, information disclosure through logs, denial of service at the gateway, elevation through the admin tool.
- EX02 Add payment data handling and tokenization, tenant isolation, secrets, logging of personal data, idempotency of payment calls, rate limiting, dependency scanning, audit trail, backups encryption, admin access.
- EX03 Paths: public API, internal API, event consumers, batch jobs, admin tool, database access. Negative tests: another customer's ID, missing token, wrong role, forged internal call.
- EX04 Ratings with rationale; mitigate high ones; accepted risk record has owner, rationale, compensating control, expiry.
- EX05 Ask for specifics, compare against the agreed severity definitions, propose options with cost, and agree an early checkpoint and prepared package for next time.
- EX06 Any compromised workload could read any order (confused deputy and lateral movement). Use service identity with scoped authorization and verify the end-user identity propagated.
- Outcome 4 is also covered by the lab acceptance and Q09-Q10.
Workplace evidence: a security review you led and its tracked outcomes.
الاختبار
Outcomes: O1 secure design review · O2 authorization boundaries · O3 risk assessment · O4 working with security.
اختبار ذاتي لك: لا توجد درجات، ولا يُحفظ أو يُرسل أي شيء. اختر إجابة ثم تحقق منها، ويمكنك المحاولة مرة أخرى كما تشاء.
الجزء العملي
Review-quality rubric (SRC-018 assessment) applied to the SRC-018-LAB1 review. Pass: at least 8/10 on the quiz, a review covering all access paths, rated findings with owners and dates, and acceptance by the peer and the role-played security lead.
أخطاء شائعة
Reviews limited to the public API; findings without owners.
التقييم
Review-quality rubric.
دليل من بيئة العمل
A security review you led and its tracked outcomes.
الصلة بالمسار الوظيفي
Security architecture (SRB-016, ARC-028).