Tag: Security and privacy
-
Implement DevSecOps to secure your CI/CD pipeline
Posted on October 5, 2022, Level intermediate Resource Length medium
Before understanding DevSecOps, let's understand what is DevOps. DevOps is the combination of cultural philosophies, practices, and tools that increase an organization's ability to deliver applications and services at high velocity. In fast-moving projects, security often lags behind and given low priority which may lead to buggy code and hacks. Let's see how we can reduce the risk of attack by integrating security in our DevOps pipeline. By Alok Maurya.
Tags devops-and-ci-cd product-and-design security-and-privacy leadership-and-career frontend-and-mobile
-
Different token types and formats explained
Posted on October 3, 2022, Level beginner Resource Length medium
When building security solutions using OAuth and OpenID Connect (OIDC), we frequently discuss tokens. Sometimes these systems are even referred to as token-based architectures. By Jonas Iggbom.
Tags product-and-design frontend-and-mobile security-and-privacy cloud-and-infrastructure
-
Introducing workerd: Open source workers runtime
Posted on September 28, 2022, Level intermediate Resource Length medium
Introduction to workerd, the JavaScript/Wasm runtime based on the same code that powers Cloudflare Workers. workerd is Open Source under the Apache License version 2.0. workerd shares most of its code with the runtime that powers Cloudflare Workers, but with some changes designed to make it more portable to other environments. By Kenton Varda.
Tags architecture-and-apis devops-and-ci-cd cloud-and-infrastructure security-and-privacy
-
Implement step-up authentication with Amazon Cognito
Posted on September 25, 2022, Level intermediate Resource Length medium
In this blog post, you'll learn how to protect privileged business transactions that are exposed as APIs by using multi-factor authentication (MFA) or security challenges. These challenges have two components: what you know (such as passwords), and what you have (such as a one-time password token). By using these multi-factor security controls, you can implement step-up authentication to obtain a higher level of security when you perform critical transactions. By Salman Moghal, Mahmoud Matouk, and Ozair Sheikh.
Tags cloud-and-infrastructure devops-and-ci-cd security-and-privacy product-and-design
-
Key points from the IBM Cost of a Data Breach Report 2022
Posted on September 10, 2022, Level beginner Resource Length short
The volume and impact of data breaches have accelerated largely in 2022, which has contributed to many adverse effects for businesses. Tc highlights several updated factors that have generated great costs across 17 countries and regions, and 17 industries. The report has included new related areas of analysis as well. By tripwire.com.
Tags cloud-and-infrastructure leadership-and-career security-and-privacy miscellaneous
-
Secure Spring Boot REST API with Apache APISIX API Gateway
Posted on August 21, 2022, Level intermediate Resource Length long
In this walkthrough, we are going to look at some of the Apache APISIX API Gateway built-in plugins for securing your Spring Boot REST APIs and demonstrate how to effectively use them. By Bobur Umurzokov.
Tags security-and-privacy product-and-design frontend-and-mobile
-
What is confidential computing?
Posted on August 19, 2022, Level beginner Resource Length medium
With the boom in cloud computing, new types of security threats have emerged. Confidential computing is a solution to the added IT security issues of working with the cloud. By Daniele Buono, James Bottomley, Hubertus Franke, Robert Senger.
Tags product-and-design security-and-privacy cloud-and-infrastructure data-and-analytics
-
Cloud platform teams are everywhere — here's why
Posted on August 12, 2022, Level beginner Resource Length medium
In HashiCorp's new State of Cloud Strategy survey, 86% of respondents said they rely on cloud platform teams — for a wide variety of very good reasons. Organizations with complex business requirements have long sought ways to simplify operations and boost the productivity of their software development teams. It appears business and IT leaders have found an answer: adopt and empower centralized cloud platform teams. By Jared Ruckle.
Tags cloud-and-infrastructure leadership-and-career security-and-privacy devops-and-ci-cd
-
How to build an organizational culture that is 'cybersecurity ready'
Posted on August 11, 2022, Level beginner Resource Length long
Cyber threats are some of the biggest challenges organizations face, but cybersecurity failure is still seen as a critical short-term risk.. By Artem Nikulchenko. By Candid Wüest, Nisha Almoula, Roman Hagen @weforum.org.
Tags leadership-and-career security-and-privacy architecture-and-apis
-
Reduce energy security risk and improve resilience with Microsoft Defender for IoT
Posted on August 3, 2022, Level beginner Resource Length long
In this blog, author wants to underscore the urgency around cybersecurity, how it's evolving, and how companies can use technology to manage risk. By Darryl Willis.
Tags devops-and-ci-cd product-and-design security-and-privacy cloud-and-infrastructure
-
Handling errors encountered when using Firebase email and password authentication (Kotlin)
Posted on July 17, 2022, Level beginner Resource Length medium
Firebase is a solution to enable developers to focus more on building the applications without the need of worrying about managing the backend. Features like user authentication, database, file storage, notifications, and more can be handled by Firebase. By Atanda Oluchi Aminat.
Tags frontend-and-mobile product-and-design security-and-privacy backend-development
-
6 best practices to improve Node.js security
Posted on July 6, 2022, Level beginner Resource Length medium
Today, Node.js is widely used in web and mobile applications, for it fills the gap between front-end and back-end applications. Unfortunately, increased usage of Node.js has opened new doors for attackers to exploit misconfigurations and vulnerabilities. By Lahiru Hewawasam.
Tags security-and-privacy product-and-design frontend-and-mobile backend-development