Security Resources

Secure Tomcat Hosting: Restrict Access to Your Web Application

Locking down your web app is unavoidable. We take a look at how to restrict access to your Tomcat-based web app in this post.

April 23, 2018

by Tetiana Fydorenchyk

· 17,508 Views · 12 Likes

Stop Using JWTs as Session Tokens

Today I’m here to talk with you about the downsides of using JWTs. Specifically, why it’s a bad idea to use JWTs as session tokens for most people.

April 23, 2018

by Randall Degges

· 58,378 Views · 35 Likes

JDK 11 and Proxies in a World Past sun.misc.Unsafe

Java 11 is making changes to the Unsafe class. See what's being deprecated and how that's going to affect proxies for future projects.

April 22, 2018

by Rafael Winterhalter

· 35,011 Views · 21 Likes

Best SecOps Tools: 50 Must-Have Tools for Your SecOps Arsenal, Part 1

Looking for some great new tools to help you better understand where your software is vulnerable and to hunt out viruses? Read on for some great options.

April 21, 2018

by Christian Lappin

· 5,783 Views · 3 Likes

Adopting Secure SDLC Practice for Agile

The ability to shift security left in the SDLC and bake security into software from the beginning is more important than ever.

April 20, 2018

by Somesh Mohanty

· 5,484 Views · 1 Like

Mythbusters: Mobile Testing Edition

Let's bust some myths around mobile testing, like required skills, security, device labs, and PWAs to help you embrace mobile testing.

April 19, 2018

by Akshita DP

· 6,332 Views · 1 Like

Build a Secure To-Do App With Vue, ASP.NET Core, and Okta

This comprehensive post will help you create a simple, secure to-do application by combining the powers of Vue.js, ASP.NET Core, and Okta.

April 19, 2018

by Nate Barbettini

· 12,599 Views · 2 Likes

A Generic Logger Factory Facade for Classic ASP.NET

A web developer discusses when creating logger system for a web application makes sense, and how to do so in an ASP.NET-based web application.

April 18, 2018

by Juergen Gutsch

· 7,915 Views · 2 Likes

Chaos Tools and Techniques for Testing the TiDB Distributed NewSQL Database

When client's data is on the line, testing should be as robust and predictive as possible, which chao engineering can help with.

April 18, 2018

by Liu Tang

· 4,869 Views · 3 Likes

How to Use Multiple Certificates When Load Testing Secure Websites

Learn how to uses multiple security certificates from both the client side and the server side for load tests using keystores.

April 17, 2018

by Konsantine Firsanov

· 13,146 Views · 2 Likes

Build Secure User Management With Vue.js, Node, and Okta

You're probably no stranger to managing multiple JavaScript frameworks, so let's see how to use Vue and Node together to create a user management system.

April 16, 2018

by Brandon Parise

· 18,744 Views · 4 Likes

The Fundamental Security Concepts in AWS - Part 1

A software architect introduces the topic of AWS security by going into a detailed examination of IAM and detective controls.

April 16, 2018

by Tom Porter, Ph.D.

· 12,364 Views · 7 Likes

Getting Access Token for Microsoft Graph Using OAuth REST API, Part 3

Ready to finish implement access tokens in that OAuth API that's calling a REST API? Read on to get started (and to finish)!

April 14, 2018

by Eran Hertz

· 65,069 Views · 4 Likes

Implement Secure Microservices With Spring Security and OAuth 2.0

As microservices take root, it's important to make sure you're keeping them secure. See how to do that with Spring Security and OAuth 2.0.

April 13, 2018

by Matt Raible

· 53,979 Views · 16 Likes

50+ Useful Docker Tools

As containers take root, dozens of tools have sprung up to support them. Check out your options for orchestration, CI/CD, logging, monitoring, and more!

Updated April 12, 2018

by JP La Torre

· 55,994 Views · 33 Likes

Blockchain Implementation With Java Code

Let's take a look at a possible blockchain implementation using Java. We build up from first principles and develop some code to help show how it all fits together.

April 12, 2018

by David Pitt

· 58,338 Views · 31 Likes

Getting Access Token for Microsoft Graph Using OAuth REST API

We look at the security protocols involved in this series, such as access tokens, and set up our OAuth application.

Updated April 12, 2018

by Eran Hertz

· 217,156 Views · 5 Likes

Quick Guide to Sec: Basic Auth, SAML, Keys, OAuth, JWT, and Tokens

As the shift-left movement continues to gain steam, it's important for developers to be familiar with basic security protocols. Read on to get a dev's explanation!

April 11, 2018

by Tomer Ben David

· 44,380 Views · 27 Likes

Global Authorization Filter: .NET Core Security, Part V

We continue our series on .NET Core security by examining how developers can globally add authentication processes to their web applications.

Updated April 10, 2018

by Neel Bhatt

· 29,491 Views · 2 Likes

Oracle EBS Penetration Testing Tool

In exploring different cybersecurity options, Oracle discovered that there was a lack of security assessment tools and made their own.

April 6, 2018

by Alexander Polyakov

· 7,209 Views · 1 Like

The Latest Security Topics