Defensive security fundamentals, threat modelling, secure-by-default design, and the attacker mindset.