Tag: Security and privacy
-
The state of security operations: How SOCs changed in 2021
Posted on October 17, 2021, Level beginner Resource Length medium
Security operations has seen non-stop evolution and growth for many years, but the past 18 months has been particularly impactful on security operations teams. In addition to the drastic transformation brought on by the COVID-19 pandemic, there have also been some significant breaches that have shifted perspectives and highlighted some key areas of concern. By pwheiler.
Tags leadership-and-career security-and-privacy miscellaneous
-
AWS WAF and CloudFront: How to use them together
Posted on October 5, 2021, Level intermediate Resource Length medium
Using AWS CloudFront and AWS WAF together, you can add some security to your sites with less work and focus on making features for your users. By Peter Grainger.
Tags devops-and-ci-cd how-to cloud-and-infrastructure security-and-privacy
-
12 critical resources to help you learn DevSecOps
Posted on October 3, 2021, Level intermediate Resource Length short
Whether you are a seasoned DevOps engineer who wants to branch out to DevSecOps, or you're just starting your career and defining your direction, there has perhaps never been a better time to enter the DevSecOps career field or learn about cloud native security. By Maor Goldberg.
Tags leadership-and-career devops-and-ci-cd security-and-privacy
-
Authenticated boot and disk encryption on Linux
Posted on September 28, 2021, Level advanced Resource Length long
Linux has been supporting Full Disk Encryption (FDE) and technologies such as UEFI SecureBoot and TPMs for a long time. However, the way they are set up by most distributions is not as secure as they should be, and in some ways quite frankly weird. In fact, right now, your data is probably more secure if stored on current ChromeOS, Android, Windows or MacOS devices, than it is on typical Linux distributions. By Pid Eins.
Tags cloud-and-infrastructure software-engineering how-to security-and-privacy
-
How to create a self-signed SSL certificate for Nginx in Ubuntu 20.04
Posted on September 24, 2021, Level intermediate Resource Length long
TLS, or transport layer security, and its predecessor SSL, which stands for secure sockets layer, are web protocols used to protect and encrypt traffic over a computer network. By Brian Boucheron and Jeanelle Horcasitas.
Tags devops-and-ci-cd cloud-and-infrastructure security-and-privacy product-and-design
-
Top 4 cloud native application architecture principles
Posted on September 12, 2021, Level beginner Resource Length short
Cloud Native Applications are independent services, collectively but loosely coupled. Cloud native development is an approach to build quality apps. It is efficient as Cloud native development focuses on architecture's modularity. We need DevOps, Microservices and Containers for cloud native. By AnAr Corporate.
Tags cloud-and-infrastructure security-and-privacy product-and-design architecture-and-apis
-
Top 10 common types of network security attacks explained
Posted on September 10, 2021, Level beginner Resource Length medium
Network security attacks have gained momentum over the past years, which highlights the need for network defenders. Learn more about network security attacks and their types. By CISOMAG.
Tags cloud-and-infrastructure security-and-privacy devops-and-ci-cd leadership-and-career product-and-design
-
Introduction to OWASP top 10 2021
Posted on September 9, 2021, Level beginner Resource Length medium
Welcome to the latest installment of the OWASP Top 10! The OWASP Top 10 2021 is all-new, with a new graphic design and an available one-page infographic you can print or obtain from our home page. By @owasp.
Tags cloud-and-infrastructure security-and-privacy devops-and-ci-cd leadership-and-career product-and-design
-
Administrator's guide: What makes passwordless, dare we say it, phish-proof?
Posted on August 31, 2021, Level beginner Resource Length medium
In some ways, the term "passwordless" is a misnomer. Yes, it's a password-less authentication method, greatly streamlining the login experience, and while that's a great incentive to use passwordless for logging in, it's not an improvement in authentication security in and of itself. By Jeremy Erickson.
Tags product-and-design cloud-and-infrastructure security-and-privacy devops-and-ci-cd frontend-and-mobile
-
Microsoft, Google to invest $30 billion in cybersecurity over next 5 years
Posted on August 26, 2021, Level beginner Resource Length short
Google and Microsoft said they are pledging to invest a total of $30 billion in cybersecurity advancements over the next five years, as the U.S. government partners with private sector companies to address threats facing the country in the wake of a string of sophisticated malicious cyber activity targeting critical infrastructure, laying bare the risks to data, organizations, and governments worldwide. Ravie Lakshmanan.
Tags miscellaneous security-and-privacy cloud-and-infrastructure leadership-and-career
-
Fortifying APIs with advanced security
Posted on August 25, 2021, Level intermediate Resource Length long
In F5's The State of Application Strategy in 2021 report, 58% of respondents said they are building a layer of APIs to modernize applications. Increasingly, though, breaches are taking the form of attacks on APIs. By Karthik Krishnaswamy.
Tags devops-and-ci-cd architecture-and-apis frontend-and-mobile product-and-design security-and-privacy
-
Data security in a multi-cloud world
Posted on August 17, 2021, Level beginner Resource Length intermediate
Securing and protecting enterprise data is at the center of the modern security plan. There are many considerations for organizations that aim to move critical workloads and data stores to the cloud, and understanding how business-critical data will be accessed, stored, and secured is a paramount concern. Written by Chris Steffen.
Tags cloud-and-infrastructure security-and-privacy leadership-and-career