Security Resources

SOLID Principles: Dependency Inversion Principle

Here's a breezy walkthrough of the D in SOLID — dependency inversion. Read up on its core tenets and how to refactor code that breaks it.

May 4, 2018

by Emmanouil Gkatziouras

CORE

· 81,809 Views · 13 Likes

Elytron: A New Security Framework in WildFly/JBoss EAP

In this tutorial, we will create a self-signed certificate to understand how SSL/TLS works in Elytron. Read on to learn how to secure your JBoss EAP!

May 4, 2018

by Siddhartha De

· 8,022 Views · 3 Likes

Oracle WebLogic RCE Deserialization Vulnerability (CVE-2018-2628)

Oracle recently released its critical patch update (CPU) for the quarter. Read on to get a security experts view on the vulnerabilities included.

May 3, 2018

by Apostolos Giannakidis

CORE

· 13,955 Views · 2 Likes

Add Spring Security and Okta for a Secure Spring Microservices Architecture

This comprehensive guide will help you secure your microservices architectures using a combination of Spring Security and Okta.

May 2, 2018

by Matt Raible

· 10,140 Views · 2 Likes

CORS in .NET Core: .NET Core Security Part VI

A developer gives a tutorial on how to enable CORS in your .NET Core web application. Read on for some Rocky Mountain cold CORS app sec.

April 30, 2018

by Neel Bhatt

· 145,498 Views · 3 Likes

Providing users a easy and secure way to log in can do wonders for the security of your web service. Read on to see how to implement SSO.

April 25, 2018

by Sanjay Patel

· 47,325 Views · 10 Likes

Build Secure User Authentication in ASP.NET Core With OIDC and OAuth

Authentication is a core component of any high-quality web applications. In this post, we learn how to implement authentication in an ASP.NET Core app.

April 25, 2018

by Lee Brandt

· 29,816 Views · 2 Likes

Five Features of Information Security Every Cloud Platform Should Provide

A discussion of the five kinds of security and enterprise security management for cloud platforms that should be included in all cloud offerings.

April 24, 2018

by Doug Paris White

· 7,828 Views · 2 Likes

JWTs With Spring Boot and Java 9

Interested in using JWTs for your Java 9/Spring Boot projects? Learn how to set up your dependencies and the use cases for you to consider.

April 24, 2018

by Sergio Martin

· 34,518 Views · 24 Likes

Secure Tomcat Hosting: Restrict Access to Your Web Application

Locking down your web app is unavoidable. We take a look at how to restrict access to your Tomcat-based web app in this post.

April 23, 2018

by Tetiana Fydorenchyk

· 18,303 Views · 12 Likes

Stop Using JWTs as Session Tokens

Today I’m here to talk with you about the downsides of using JWTs. Specifically, why it’s a bad idea to use JWTs as session tokens for most people.

April 23, 2018

by Randall Degges

· 59,104 Views · 35 Likes

JDK 11 and Proxies in a World Past sun.misc.Unsafe

Java 11 is making changes to the Unsafe class. See what's being deprecated and how that's going to affect proxies for future projects.

April 22, 2018

by Rafael Winterhalter

· 35,830 Views · 21 Likes

Best SecOps Tools: 50 Must-Have Tools for Your SecOps Arsenal, Part 1

Looking for some great new tools to help you better understand where your software is vulnerable and to hunt out viruses? Read on for some great options.

April 21, 2018

by Christian Lappin

· 6,272 Views · 3 Likes

Adopting Secure SDLC Practice for Agile

The ability to shift security left in the SDLC and bake security into software from the beginning is more important than ever.

April 20, 2018

by Somesh Mohanty

· 5,812 Views · 1 Like

Mythbusters: Mobile Testing Edition

Let's bust some myths around mobile testing, like required skills, security, device labs, and PWAs to help you embrace mobile testing.

April 19, 2018

by Akshita DP

· 6,603 Views · 1 Like

Build a Secure To-Do App With Vue, ASP.NET Core, and Okta

This comprehensive post will help you create a simple, secure to-do application by combining the powers of Vue.js, ASP.NET Core, and Okta.

April 19, 2018

by Nate Barbettini

· 12,944 Views · 2 Likes

A Generic Logger Factory Facade for Classic ASP.NET

A web developer discusses when creating logger system for a web application makes sense, and how to do so in an ASP.NET-based web application.

April 18, 2018

by Juergen Gutsch

· 8,303 Views · 2 Likes

Chaos Tools and Techniques for Testing the TiDB Distributed NewSQL Database

When client's data is on the line, testing should be as robust and predictive as possible, which chao engineering can help with.

April 18, 2018

by Liu Tang

· 5,399 Views · 3 Likes

How to Use Multiple Certificates When Load Testing Secure Websites

Learn how to uses multiple security certificates from both the client side and the server side for load tests using keystores.

April 17, 2018

by Konsantine Firsanov

· 14,246 Views · 2 Likes

Build Secure User Management With Vue.js, Node, and Okta

You're probably no stranger to managing multiple JavaScript frameworks, so let's see how to use Vue and Node together to create a user management system.

April 16, 2018

by Brandon Parise

· 19,107 Views · 4 Likes

The Latest Security Topics