Avoid Predictable Naming Conventions

Use random, unique, and non-predictable naming conventions for resources in the system or network to make it difficult for attackers to enumerate and gather information.

Applies to

T0100 Discover naming conventions
T0107 Discover internal artifacts names

References

https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/01-Information_Gathering/README