《数据安全架构设计与实战》：本书系统性地介绍数据安全架构的设计与实践，融入了作者多年在安全领域积累的实践经验。全书分四大部分，共20章。 第一部分介绍安全架构的基础知识，内容包括安全、数据安全、安全架构、5A方法论、CIA等基本概念,为后续论述奠定基础。 第二部分介绍产品安全架构，内容包括：身份认证、授权、访问控制、审计、资产保护等，讲解如何从源头设计来保障数据安全和隐私安全，防患于未然。 第三部分介绍安全技术体系架构，内容包括：安全技术架构、网络和通信层安全架构、设备和主机层安全架构、应用和数据层安全架构、安全架构案例分析等。 第四部分介绍数据安全与隐私保护治理，内容包括：数据安全治理、数据安全政策文件体系、隐私保护基础与增强技术、GRC治理框架、数据安全与隐私保护的统一等。

Security architecture patterns and NIST 800-53 controls from opensecurityarchitecture.org

Personal study & reference collection on security architecture, threat modeling, incident response and defensive strategies.

A portfolio of completed rooms, challenges, and CTFs from TryHackMe.com, showcasing hands-on experience with real-world cybersecurity scenarios — from hacking machines to investigating attacks. This collection highlights my practical skills across diverse technologies, reflecting my growth and learning through various cybersecurity learning paths.

Opinionated AWS Organizations RCP/SCP starter kit for data perimeter patterns, exception governance, validation, and staged rollout.

A conceptual architecture designed to make file-based malware attacks fundamentally impossible

Ariadne is a case study in applying security engineering principles to the design of autonomous agents. The penetration testing agent is the vehicle, and the architecture is the real contribution. The name comes from Ariadne's thread, the scope and audit trail that let the agent go deep and return safely in bounds. Provided as is, without warranty.

An offline, high-integrity Xbox/XInput controller to Windows PC input mapper built on a fail-closed, pessimistic architecture.

Fuller 7-Layer Agentic AI Security Framework (F7-LAS)

Cybersecurity engineering reference guide for detection, response, threat intelligence, cloud, AppSec, AI security, automation, and architecture.

Quantitative model for measuring organizational security risk caused by human dependencies, decision concentration, and bus-factor effects.

The official repository for the Entropic Threat Continuum (ETC) framework and the Plesca Taxonomy, translating theoretical cybersecurity into practical, open-source architectures.

Responsibility boundary certificates for systems. SILENT records what a system declared it was responsible for observing at a specific moment in time.

Enterprise security control validation framework with MITRE mapping, detection hypothesis modeling, and continuous assurance design.

Automated incident response playbook with threat intelligence and MITRE ATT&CK mapping

Security-hardened S3 & CloudFront deployment tool. Features idempotent sync and global cache invalidation. Engineered by a CISSP/AWS SCS professional.

Private, policy-enforced reference pattern for governed Microsoft Sentinel automation using Azure Logic Apps Agent Loop, Azure Function PEP, Entra ID, managed identity, and Private Endpoints.

A high-performance, asynchronous Identity-Aware Proxy (IAP) implementing Zero Trust architecture principles for securing legacy infrastructure. (NIS2 Compliant).

Architecture cloud AWS sécurisée (IaaS + PaaS) · VPC, IAM least-privilege, KMS, ECS Fargate, pipeline CI/CD durci (UQAC)

An internal application platform deployed on AWS EC2 using Terraform and Ansible, with strong emphasis on network isolation, zero-trust access, and policy-as-code enforcement across infrastructure and CI.