Security¶
Short definition¶
Prevent or limit reading, tampering, impersonation and unavailability against a defined adversary.
Concrete example¶
Bob must receive the correct message from the correct contact and be able to use the application.
What it protects¶
Confidentiality, integrity, availability and authenticity, depending on the threat model.
What it does not protect¶
The adjective “secure” does not guarantee all properties or versions.
Why it matters¶
Choosing requires specifying what needs protection and from whom.
Technical details
A scope-limited audit does not establish the safety of the whole app, backend and current binaries.