Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
---
title: "Decentralization"
description: "Security best practices for distributed canister control using the SNS, governance mechanisms, and reducing centralized trust."
title: "Canister control"
description: "Security best practices for canister control: using governance frameworks such as the SNS, verifying the trust level of canisters you depend on, and loading assets only from trusted domains."
sidebar:
order: 10
---
Expand Down
4 changes: 2 additions & 2 deletions docs/guides/security/canister-upgrades.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
---
title: "Canister Upgrade Security"
description: "Security best practices for canister upgrade hooks, panics during upgrades, and timer reinstatement."
title: "Canister upgrades"
description: "Security best practices for canister upgrade hooks, panics during upgrades, and timer reinstatement after upgrades."
sidebar:
order: 8
---
Expand Down
2 changes: 1 addition & 1 deletion docs/guides/security/data-integrity-and-authenticity.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
---
title: "Data Integrity and Authenticity"
title: "Data integrity and authenticity"
description: "Security best practices for certified variables, asset certification, and protecting data authenticity on ICP."
sidebar:
order: 4
Expand Down
2 changes: 1 addition & 1 deletion docs/guides/security/data-storage.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
---
title: "Data Storage"
title: "Data storage"
description: "Security best practices for canister data storage, stable memory, encryption of sensitive data, and backups."
sidebar:
order: 3
Expand Down
2 changes: 1 addition & 1 deletion docs/guides/security/dos-prevention.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
---
title: "Denial of Service Prevention"
title: "DoS prevention"
description: "Security best practices for protecting canisters against DoS and DDoS attacks, noisy neighbors, and expensive calls."
sidebar:
order: 7
Expand Down
2 changes: 1 addition & 1 deletion docs/guides/security/formal-verification.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
---
title: "Formal Verification"
title: "Formal verification"
description: "Applying formal verification and TLA+ model checking to find and prove the absence of security bugs in ICP canisters."
sidebar:
order: 12
Expand Down
2 changes: 1 addition & 1 deletion docs/guides/security/https-outcalls.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
---
title: "HTTPS Outcall Security"
title: "HTTPS outcalls"
description: "Security best practices for canister HTTPS outcalls: API keys, rate limits, idempotency, response consistency, and input validation."
sidebar:
order: 6
Expand Down
4 changes: 2 additions & 2 deletions docs/guides/security/identity-and-access-management.mdx
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
---
title: "Identity and Access Management"
description: "Security best practices for authentication, anonymous principal rejection, ingress message inspection, and session management."
title: "Identity and access management"
description: "Security best practices for authentication, anonymous principal rejection, ingress message inspection, session management, and mobile Internet Identity integration."
sidebar:
order: 2
---
Expand Down
2 changes: 1 addition & 1 deletion docs/guides/security/inter-canister-calls.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
---
title: "Inter-Canister Call Security"
title: "Inter-canister calls"
description: "Security best practices for handling traps in callbacks, message ordering, rejected calls, and untrustworthy canisters."
sidebar:
order: 5
Expand Down
4 changes: 2 additions & 2 deletions docs/guides/security/miscellaneous.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
---
title: "Miscellaneous Security Practices"
description: "Miscellaneous security best practices: data confidentiality, secure randomness, endpoint validation, testing, reproducible builds, monotonic time, and floating point."
title: "Miscellaneous practices"
description: "Miscellaneous security best practices: data confidentiality, secure randomness, endpoint verification, testing, reproducible builds, monotonic time, and floating point."
sidebar:
order: 11
---
Expand Down
2 changes: 1 addition & 1 deletion docs/guides/security/observability-and-monitoring.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
---
title: "Observability and Monitoring"
title: "Observability and monitoring"
description: "Security best practices for monitoring canister cycles, logs, and health indicators."
sidebar:
order: 9
Expand Down
3 changes: 2 additions & 1 deletion docs/guides/security/overview.md
Original file line number Diff line number Diff line change
@@ -1,8 +1,9 @@
---
title: "Security Overview"
title: "Security overview"
description: "Introduction to the ICP security best practices for canister and web app developers."
sidebar:
order: 1
label: "Overview"
---

This section provides security best practices for developing canisters and web apps served by canisters on ICP. These best practices are mostly inspired by issues found in security reviews.
Expand Down
Loading