securitylisted

# Security Skills ## Overview Security knowledge essential for building secure applications, protecting user data, and preventing common vulnerabilities. ## Security Layers ``` ┌─────────────────────────────────────────────┐ │ Application Security │ │ ┌─────────────────────────────────────────┐│ │ │ Authentication & AuthZ ││ │ │ ┌───────────────────────────────────┐ ││ │ │ │ Input Validation │ ││ │ │ │ ┌─────────────────────────────┐ │ ││ │ │ │ │ Data Protection │ │ ││ │ │ │ └─────────────────────────────┘ │ ││ │ │ └───────────────────────────────────┘ ││ │ └─────────────────────────────────────────┘│ │ Infrastructure Security │ └─────────────────────────────────────────────┘ ``` ## Categories ### Authentication - JWT tokens and refresh strategies - OAuth 2.0 / OpenID Connect - Session management - Multi-factor authentication - Passwordless authentication ### Authorization - Role-Based Access Control (RBAC) - Attribute-Based Access Control (ABAC) - Permission systems - Access control patterns ### OWASP Top 10 - Injection attacks - Broken authentication - Cross-Site Scripting (XSS) - Cross-Site Request Forgery (CSRF) - Security misconfiguration - Sensitive data exposure ### API Security - Rate limiting - Input validation - API key management - CORS configuration ### Data Protection - Encryption at rest/transit - Password hashing - Secrets management -