Lexicon

Assumption-Driven Security

Kind: anti-pattern

Layer: Security Core

Record: lexicon:assumption-driven-security

Canonical: Lexicon

Designing defenses around assumed threats rather than a deliberate analysis of realistic attack vectors.

Listed in Lexicon terms, after Anonymous Sensitive Access and before Authenticated-Equals-Authorized.

Category

  • Security Privacy Compliance

Negated by

  • Threat Modeling

Violates

  • Threat Modeling

Linked from

  • Security / Privacy / Compliance / Governance