Alex Gaynor • 9/11/2017

Categorizing Security Engineering Work

This article presents a system for categorizing security engineering tasks into four distinct areas: work that prevents security breaches, work that detects breaches, work that reduces damage from breaches, and work that generates more security tasks (like audits and bug bounties). It explains the purpose of each category and argues that balancing investment across all four is crucial for effective security.

0 comments

#Threat Modeling #Incident Response #Security Engineering