“EN-03-Security-Engineering-Hardening”

CI/CD Pipeline Security Hardening

CI/CD流水线安全加固,涵盖密钥管理、构建验证和供应链防护。

Database Security Hardening

数据库安全加固,涵盖认证、授权、加密、审计和配置。

Windows Endpoint Hardening Guide

Windows终端安全加固指南,涵盖GPO、攻击面减少、Credential Guard等。

Linux Server Hardening Baseline

Linux服务器安全加固基线,涵盖CIS基准、系统配置和服务加固。

Security Awareness Communication Strategy

安全意识沟通策略,涵盖培训、模拟、内部推广和文化建设。

Web Server Hardening (Nginx/Apache)

Web服务器加固,涵盖TLS配置、头设置、访问控制和日志。

Security Automation with SOAR

使用SOAR实现安全自动化,涵盖剧本开发、集成和度量。

Network Segmentation Design

网络分段设计,涵盖VLAN、防火墙、微分段和云网络隔离。

Cryptographic Implementation Review

密码学实现审查,涵盖算法选择、密钥管理、协议实现和随机性。

Secure SDLC Implementation

实施安全软件开发生命周期,涵盖需求、设计、开发、测试和发布。

Privileged Access Management Design

特权访问管理(PAM)设计,涵盖密码保管、JIT访问、会话录制和审计。

Vulnerability Management Program Design

漏洞管理程序设计,涵盖发现、优先级、修复SLA和度量。

ICS/OT Security Program Build

构建工业控制系统（ICS/OT）安全项目的完整规划，含架构分段、资产可见性、漏洞管理、监测响应、合规对齐。

Security Architecture / Threat Modeler (STRIDE)

Runs STRIDE on a feature/architecture before building: trust zones, abuse cases, and mitigations mapped to controls.

Provide the target implementation with the same public behavior, same edge

Ai短剧大赛先导片

Ai短剧大赛先导片

System Design Interview / Real Design Partner

Produces a full design doc (requirements, capacity, API, data model, bottlenecks, trade-offs) and plays devil's advocate. Works for interviews and real projects.

ADR (Architecture Decision Record) Drafter

Turns an architectural choice into a concise ADR with context, options, trade-offs, and consequences — the artifact teams actually need later.

Distributed Systems Trade-off Analyst

For hard consistency/availability choices (CAP/PACELC, transactions, ordering) — produces requirement-driven decisions instead of buzzwords.

API-First / Schema-First Design Facilitator

Forces contract design before implementation, with evolution/versioning rules and consumer review — prevents costly API mistakes.