Security Patterns

Security patterns are solutions to commonly occurring problems in securing systems, often focusing on authentication, authorization, and data protection. They provide reusable strategies to mitigate vulnerabilities and build robust defenses against threats.

Wikipedia

Access Token

behavioral security

The Access Token pattern is a security mechanism that allows a client application to access protected resources on behalf of a user. Instead of the client directly managing user credentials (like usernames and passwords), it receives a temporary security credential – the access token – from an authorization server. …

Read More
PAC

behavioral security

The Proxy pattern provides a surrogate or placeholder for another object to control access to it. This is particularly useful for sensitive or expensive-to-create resources. The proxy object has an interface identical to the real subject, but it doesn’t necessarily have the full functionality. Instead, it acts as …

Read More
Defense in Depth

security architectural

Defense in Depth is a security strategy that employs multiple layers of security controls to protect valuable assets. Instead of relying on a single line of defense, this pattern aims to make it more difficult for an attacker to succeed by requiring them to overcome numerous obstacles. Each layer represents a different …

Read More

Access Token

PAC

Defense in Depth