Security Matrix

CoderStudio Platform Security Compliance & Parameters

At CoderStudio Salem, security is the foundation of our engineering ethos. This Security Matrix outlines the strict defensive protocols, database isolation limits, sandbox containers, and access restrictions that safeguard our student accounts, data, and interactive coding playground workspaces.

Security Domain	Threat Parameter	Severity	Protocol & Active Defense Policy
Sandbox Isolation	Container Escape / Code Exploitation	High	Virtual sandbox sessions run inside completely isolated, short-lived Docker environments with non-root runtime permissions and strict filesystem limits.
Database Integrity	SQL Injection & Cross-Visibility	High	All query engines utilize parameterized SQL inputs with cryptographically signed authentication tokens and Row-Level Security (RLS) enforcement.
Data Transmission	Man-in-the-Middle (MitM) Attacks	Medium	100% of network payloads transit via secure TLS 1.3 tunnels. WebSockets utilize secure WSS connections with rapid key rotations.
Access Controls	Credential Harvesting / brute-force	Medium	Enforces secure multi-factor authentication (MFA), password hashing via bcrypt (work factor 12), and automated rate-limiting per API endpoint.
Telemetry Protection	Student Data Extraction	Low	Course tracking and sandbox metric databases are fully encrypted at rest via AES-256 and subject to GDPR/DPDP access rules.

Secure Development Principles

We train our academy students to write production-grade code that is resilient, highly performant, and secure by default. Our Cybersecurity and Web Engineering tracks incorporate extensive secure coding principles, highlighting how to mitigate the OWASP Top 10 vulnerabilities directly inside their interactive sandboxes.