4 ms·
I’m not an expert, but just a few personal guidelines off the top of my head: 1) Only store what you absolutely need, you can’t lose what you don’t have 2) Wh
by bdibs 7y ago
I’m not an expert, but just a few personal guidelines off the top of my head:
1) Only store what you absolutely need, you can’t lose what you don’t have
2) When logging, redact passwords and PII
3) Ensure proper user rights using a whitelist (not a blacklist)
4) Use a proper IDS to detect anomalies early
- maxheadroom 7y ago5) Encrypt data at rest (where possible) and look to take advantage of AMD's[0] or Intel's[1] coming features for runtime. [0] - https://developer.amd.com/sev/ https://developer.amd.com/sev/ [1]- https://software.intel.com/en-us/sgx https://software.intel.com/en-us/sgx