From bd845b8dd5a6473e4e936bb33bf2a8d57501ae1c Mon Sep 17 00:00:00 2001 From: Philipp Mieden Date: Fri, 12 Sep 2025 17:05:00 +0200 Subject: [PATCH] updates --- foomo/docs/security/index.md | 15 +++++++++++++-- foomo/docs/security/operating-system.md | 15 --------------- foomo/docs/security/organization.md | 2 +- foomo/docs/security/web-development.md | 2 +- 4 files changed, 15 insertions(+), 19 deletions(-) delete mode 100644 foomo/docs/security/operating-system.md diff --git a/foomo/docs/security/index.md b/foomo/docs/security/index.md index 1ecce37..dec7d37 100644 --- a/foomo/docs/security/index.md +++ b/foomo/docs/security/index.md @@ -3,6 +3,17 @@ id: index sidebar_position: 0 --- -# Security guide +# Security -This is a general guide for software security. +Secure software development is a practice that integrates security considerations into every phase of the software development lifecycle (SDLC). The goal is to build resilient and robust software that can withstand attacks, protect user data, and maintain the integrity of the systems it runs on. This involves a shift from a reactive "patch-on-breach" model to a proactive, "secure-by-design" approach. By thinking about potential threats and building defenses from the very beginning, we can reduce vulnerabilities, mitigate risks, and create more trustworthy products. This guide provides an overview of various security domains, from organizational policies to specific hardening techniques for different platforms and technologies. + +## Table of Contents + +- [Containers](./containers.md) - Best practices for securing Docker containers, covering the entire lifecycle from building hardened, minimal images to securing the runtime environment and managing data safely. +- [Kubernetes](./kubernetes.md) - A comprehensive guide to Kubernetes security, detailing how to secure control plane components, implement network policies, harden workloads with admission controllers, and manage secrets and data. +- [Linux](./linux.md) - A baseline for hardening Linux systems, focusing on user and access management, automated patching, filesystem encryption, network security with host-based firewalls, and logging. +- [macOS](./macos.md) - Actionable guidance for securing corporate Macs by leveraging native platform features like FileVault, Gatekeeper, and System Integrity Protection, enforced through a Mobile Device Management (MDM) solution. +- [Organization](./organization.md) - Outlines a holistic security program, defining core pillars like Identity and Access Management (IAM), Application Security (AppSec), and Incident Response, with maturity milestones and checklists for governance. +- [Pentests](./pentests.md) - A pragmatic guide to penetration testing methodology, covering planning, reconnaissance, exploitation, and reporting for web applications, APIs, and networks, aligned with OWASP standards. +- [Web Development](./web-development.md) - Engineering-focused best practices for building secure web applications, covering the secure SDLC, defense-in-depth principles, and specific controls for mitigating common vulnerabilities like XSS, SQLi, and CSRF. +- [Windows](./windows.md) - A high-level guide to hardening Windows security, centered on applying comprehensive security templates and scripts to reduce the attack surface, enforce strong policies, and leverage built-in controls like Defender and BitLocker. diff --git a/foomo/docs/security/operating-system.md b/foomo/docs/security/operating-system.md deleted file mode 100644 index 8fead7c..0000000 --- a/foomo/docs/security/operating-system.md +++ /dev/null @@ -1,15 +0,0 @@ ---- -title: Operating System Security -slug: /security/operating-system -authors: [philipp] ---- - -# Operating System Security - -This section provides detailed security hardening guides for various operating systems. Choose an operating system below to view the recommended security baseline and configuration practices. - -- [macOS Security](./macos.md) -- [Linux Security](./linux.md) -- [Windows Security](./windows.md) - - diff --git a/foomo/docs/security/organization.md b/foomo/docs/security/organization.md index 0077a5e..4b8a6ad 100644 --- a/foomo/docs/security/organization.md +++ b/foomo/docs/security/organization.md @@ -1,5 +1,5 @@ --- -title: Organizational Security Operations +title: Organizational Security slug: /security/organization authors: [philipp] --- diff --git a/foomo/docs/security/web-development.md b/foomo/docs/security/web-development.md index b7e2001..1cae588 100644 --- a/foomo/docs/security/web-development.md +++ b/foomo/docs/security/web-development.md @@ -1,5 +1,5 @@ --- -title: Secure Web Application Development +title: Web Application Development slug: /security/web-development authors: [philipp] ---