CyberAssureSecurity Architecture Wiki

An open-source reference for enterprise security architects, engineers, and students.

Get Started

View on GitHub

🏗️

Foundations

Secure system design, DARIOM lifecycle, zero trust principles, time-based security, and post-quantum cryptography.

🕵️

Threat Intelligence

MITRE ATT&CK threat modelling, vulnerability analysis, ransomware defence, and frontier AI threats.

🌐

Network Security

Layer 2/3 security, VLANs, PVLANs, firewalls, segmentation, SNMP/NTP, bogon filtering.

🏢

Infrastructure

Hardening hybrid on-prem and cloud infrastructure, NGFW deployment patterns.

🔀

Network-Centric App Security

NSM, NIDS/NIPS, proxies, secure remote access, VPNs, ZTNA, SASE, and network encryption.

💾

Data-Centric Security

WAF, database firewalls, activity monitoring, and data classification.

🪪

Identity & Access

Privileged access, identity federation, and zero trust architecture implementation.

📱

Endpoint & Device

MDM, EDR, IoT security, private cloud, and endpoint security architecture.

📊

Analytics & Detection

Security logging, SIEM architecture, AI-driven detection, SOAR, and threat hunting.

🏛️

Risk & Governance

Asset management, supply chain security, NCSC CAF, Cyber Essentials, OPSEC, people-centred security, and penetration testing.

Attributions

MITRE ATT&CK® is a registered trademark of The MITRE Corporation. This wiki is an independent community resource and is not affiliated with or endorsed by MITRE, NIST, NCSC, CIS, or any vendor mentioned. Content is provided for educational purposes under the MIT Licence.