Some basic principles of security.

1 advantages

For example, the application layer and the application layer, drive and drive confrontation, that either side obviously has no advantage. The advantage of security software is: First enter the user system, enter the kernel, occupy the entrance advantage. So we should stick to these advantages. What is the advantage of thinking and keeping good

2 Trust relationships

The larger the unit of trust, the greater the risk, and the more complex the processing logic. Partial trust, with limited trust, not full trust, is the preferred policy. In addition, the trust relationship depends on the point also to grasp the good.

3 Whole, individual

Not for the%0.01 problem, pay 200% of the maintenance effort, or make the original simple framework become more complex, protection is the whole system, not just rely on a point. When a point is strong, this point is not the most attacking point. Look for short boards and optimize the overall framework to reduce logical attacks.

4 Timely response speed

What mechanisms are in place to respond to sudden threats and minimize the impact: Try to protect the user's important data from being compromised.

5 Cost

Defensive confrontation, the good plan is to attack or defend with the lowest cost, while the other side of the cost will increase, confrontation is a continuous process, in the process of defending one side can only increase the difficulty of the attack, not to eliminate the attack, then raise the cost

Some basic principles of security.