Tag: Security and privacy
-
How Web3 and a mesh organizational design can turn challenges into opportunities
Posted on March 4, 2023, Level intermediate Resource Length medium
We're in a new era (or at least the early days of a new chapter)—not just a new period in our technological history but also a new paradigm for how people work and contribute to solving problems. One significant challenge I've found in working with leaders is that most organizations are not designed to adapt—let alone thrive—in this new era. By Jen Kelchner.
Tags architecture-and-apis security-and-privacy business-and-emerging-tech frontend-and-mobile product-and-design
-
Encrypt and decrypt data in Node.js using aes-256-cbc
Posted on March 3, 2023, Level intermediate Resource Length medium
This tutorial aims at teaching you how to encrypt and decrypt data in Node.js. The method provided here is pretty straightforward and easy to understand, as it has been written with the intention of enabling other programmers and developers to learn how to encrypt data in their applications. By Ugbem Job.
Tags security-and-privacy backend-development frontend-and-mobile how-to product-and-design
-
How to get started filling 3.4 million cybersecurity jobs
Posted on February 18, 2023, Level beginner Resource Length medium
It seems like it's getting harder to hire for security roles, just as attacks grow more sophisticated. Here's some advice to ease recruiting — and nurture security talent in-house. By Jennifer Riggins.
Tags miscellaneous leadership-and-career security-and-privacy cloud-and-infrastructure
-
Azure Confidential Computing on 4th gen Intel Xeon scalable processors with Intel TDX
Posted on January 28, 2023, Level beginner Resource Length short
Intel TDX meets the Confidential Computing Consortium (CCC) standard for hardware-enforced memory protection not controlled by the cloud provider, all while delivering minimal performance impact with no code changes. By Mark Russinovich Chief Technology Officer and Technical Fellow, Microsoft Azure.
Tags cloud-and-infrastructure product-and-design security-and-privacy
-
A hands-on approach to symmetric-key encryption
Posted on January 22, 2023, Level intermediate Resource Length medium
In this article, we will learn how symmetric-key encryption works from a practical perspective. We will use OpenSSL to put into practice some concepts about symmetric-key encryption. By Sergio Prado.
Tags miscellaneous security-and-privacy software-engineering devops-and-ci-cd
-
NIST cybersecurity framework compliance with Sepio
Posted on January 12, 2023, Level intermediate Resource Length short
The NIST Cybersecurity Framework (NIST CSF) is a voluntary framework developed by the National Institute of Standards and Technology (NIST) to help organizations manage cybersecurity risk. It was created via an executive order from President Obama in 2013 to improve cybersecurity within critical infrastructure. By Julien Katzenmaier.
Tags security-and-privacy architecture-and-apis leadership-and-career miscellaneous
-
Securing Lambda function URLs using Amazon Cognito, Amazon CloudFront and AWS WAF
Posted on December 31, 2022, Level intermediate Resource Length medium
Lambda function URLs is a dedicated HTTPs endpoint for a AWS Lambda function. You can configure a function URL to have two methods of authentication: IAM and NONE. IAM authentication means that you are restricting access to the function URL (and in-turn access to invoke the Lambda function) to certain AWS principals (such as roles or users). Authentication type of NONE means that the Lambda function URL has no authentication and is open for anyone to invoke the function. By Marcia Villalba.
Tags security-and-privacy architecture-and-apis devops-and-ci-cd
-
What Is CARTA? Continuous Adaptive Risk and Trust Assessment explained
Posted on December 13, 2022, Level beginner Resource Length short
Digital services made for consumers are opening up new opportunities and vulnerabilities. With more employees bringing unmanaged devices to the office, business networks can be accessed by many more people. Plus, remote work means that an organization's IT perimeter is no longer restricted within its walls. By Mihaela Marian.
Tags leadership-and-career security-and-privacy miscellaneous
-
Five ways to harden your Linux server with Ansible
Posted on December 7, 2022, Level beginner Resource Length medium
Automation allows you to apply compliance and security policies consistently across your servers, verify compliance, and remediate servers. By Ricardo Gerardi.
Tags cloud-and-infrastructure security-and-privacy devops-and-ci-cd
-
Don't know what to monitor? L.E.T.S. Start with 4 Metrics!
Posted on December 1, 2022, Level beginner Resource Length medium
"We paid for a bunch of tools but we don't know what we should be looking at. There are tons of charts that don't seem to mean anything!" Software monitoring, how does it work? By Jeremy Hicks.
Tags devops-and-ci-cd security-and-privacy cloud-and-infrastructure product-and-design architecture-and-apis frontend-and-mobile
-
Microsoft says it's just too difficult to effectively disrupt ransomware
Posted on November 30, 2022, Level beginner Resource Length medium
The company details its new approach to combatting cyber crime as the underground industry drains $6 trillion from the global economy. By Connor Jones.
Tags leadership-and-career security-and-privacy cloud-and-infrastructure miscellaneous
-
Implementing TLS in Java
Posted on November 29, 2022, Level intermediate Resource Length short
TLS, or transport layer security, is a protocol used across the globe to encrypt and secure communication over the internet. In this article, we'll discuss what TLS is, what benefits it provides, and why you need it. Then we'll walk through implementing TLS in Java. By Himanish Munjal.
Tags product-and-design backend-development security-and-privacy software-engineering