How it works
Why does it behave this way?
- 1
Why security is different
What changes when the opponent watches your design and chooses how to attack it?
2 pages - 2
Identity and access
Why is authentication the problem of proving a secret without creating a secret?
3 pages - 3
Enforcement points
What does fine-grained access control cost, and why does row filtering not stop inference?
5 pages - 4
Protection
Why does protection shrink the secret rather than remove it?
6 pages - 5
Privacy
Why is the only privacy lever the destruction of information?
6 pages - 6
Where it breaks
Why are the field's weak points one group, and why do controls that are all green still leave data exposed?
6 pages - 7
What security forbids
What can no combination of access control, protection and privacy give you, and what position is left to choose?