Security Handbook

Abstract	Security Handbook
Authors	Walter Fan
Category	learning note
Status	WIP
Updated	2026-02-08
License	CC-BY-NC-ND 4.0

Contents:

• 1. Basic
  • Overview
  • network security
  • Identity and Access Management (IAM)
  • STRIDE
  • Threat Modelling
  • Secrets Manage
  • 医疗软件网络安全
• 2. Protocol
  • Overview
  • OAuth2
  • JWT
  • OIDC
  • OpenID Connect
  • SPIFFE
  • X.509 Certificate
  • WIMSE (Workload Identity in Multi-System Environments)
  • WIT (Workload Identity Token)
  • WIMSE 和 WIT 的关系
  • 总结
• 2. Framework and Library
  • Security Library
  • Spring Security
• 4. Threat and Risk
  • A01:2021 – Broken Access Control
• 5. FAQ
  • FAQ

Indices and tables

• Index

• Module Index

• Search Page