위협의 종류와 대응책

Use strong authentication.
Do not store secrets (for example, passwords) in plaintext.
Do not pass credentials in plaintext over the wire.
Protect authentication cookies with Secure Sockets Layer (SSL)

Use data hashing and signing.
Use digital signatures.
Use strong authorization.
Use tamper-resistant protocols across communication links.
Secure communication links with protocols that provide message
integrity.

Create secure audit trails.
Use digital signatures.

Use strong authorization.
Use strong encryption.
Secure communication links with protocols that provide message
confidentiality.
Do not store secrets (for example, passwords) in plaintext.

Use resource and bandwidth throttling techniques.
Validate and filter input.

Follow the principle of least privilege and use least privileged service
accounts to run processes and access resources.