Security Resources

API Authentication: Implementation of Best Practices

This article addresses a number of the best practices for implementing API security, including OAuth 2.0, API keys, usernames and passwords, and more.

September 6, 2020

by Brenton House

· 11,323 Views · 11 Likes

Angular, Docker, and Spring Boot: A Match Made in Heaven

Here we take a look at the combination of Angular, Docker, and Spring Boot in a sample application with this tutorial and screencast.

August 31, 2020

by Matt Raible

· 39,663 Views · 10 Likes

Mitigating DevOps Repository Risks

Docker is in the news for two reasons: Image retention limits and download throttling. Let's discuss both and see the better alternatives.

August 27, 2020

by Pavan Belagatti

CORE

· 20,386 Views · 4 Likes

How to Give Access to AWS Resources Without Creating 100s of IAM Users

This post demonstrates the use of AWS Security Token Service to give access to AWS Resources to users that don't exists in AWS IAM.

August 26, 2020

by Rajan Panchal

· 5,415 Views · 3 Likes

Json Web Token: How to Secure a Spring Boot REST API

In this post, I show how to secure Spring Boot REST API using Json Web Tokens for authorization. We will also use Spring Security in this tutorial.

August 25, 2020

by Yogesh Mali

· 53,389 Views · 17 Likes

The 101: Spring Boot and Angular Deployment

Take a look at this tutorial that demonstates Spring Boot and Angular deployment to Heroku as well as some tips on keeping them secure.

August 20, 2020

by Matt Raible

· 13,599 Views · 9 Likes

Microservices Security in Action

This recently published book on microservices security highlights the patterns and best practices of ensuring microservices are safe and secure.

August 18, 2020

by Prabath Siriwardena

· 5,853 Views · 5 Likes

Establish Connection Between Google Cloud Platform and MuleSoft Anypoint VPN Using BGP Routing (IPSec Tunneling)

In this article, learn how to establish a connection between Google Cloud Platform and MuleSoft Anypoint VPN.

August 14, 2020

by Jitendra Bafna

· 10,363 Views · 5 Likes

Hardening Docker Container Using Seccomp Security Profile

This article examines Linux's Secure Computing Mode for securing Docker containers through its default and custom configurations.

August 14, 2020

by Sudip Sengupta

CORE

· 13,981 Views · 3 Likes

Top 7 Security Measures for IoT Systems

In this article, take a look at seven crucial steps for a business to uplift IoT security for preventing a data breach.

August 12, 2020

by Mohit Shah

· 13,306 Views · 2 Likes

OWASP TOP 10 API Security Part 2 (Broken Object Level Authorization)

In this article we will explore the first of the OWASP Top 10 API security risks for year 2019. (API1:2019 - Broken object level authorization).

August 10, 2020

by Satish Sharma

· 6,707 Views · 4 Likes

Advanced Docker Security with AppArmor

AppArmor when implemented properly, provides an enhanced level of security to the deployed containers at a program level.

August 7, 2020

by Sudip Sengupta

CORE

· 8,496 Views · 2 Likes

How to Properly Leverage Elasticsearch and User Behavior Analytics for API Security

How to set up Elasticsearch and Kibana for User Behavior Analytics (UBA) in API Security Monitoring — Accurately identify API security vulnerabilities.

August 6, 2020

by Derric Gilling

CORE

· 7,608 Views · 6 Likes

When to Use Go vs. Java | One Programmer’s Take on Two Top Languages

There is no silver bullet when it comes to software development. I’ll detail below how one traditional and one burgeoning language worked in my experience.

August 5, 2020

by John Griffin

· 43,773 Views · 6 Likes

Spring Web Flux UI with Spring Security

Take a look at how to construct an application using Spring Web Flux and Thymeleaf, with Spring security, a gateway services, and other microservices.

August 2, 2020

by Rajesh Venugopal

· 5,659 Views · 8 Likes