Security Resources

Implement Hibernate Second-Level Cache With NCache

Set up a Java application with Hibernate, configure NCache as the second-level cache, and test the implementation to see how caching reduces the DB load.

October 22, 2024

by Abhinav Pandey

· 8,542 Views · 3 Likes

How to Implement Client-Side Load Balancing With Spring Cloud

In this article, you will learn how to perform client-side load balancing in microservices by Spring Cloud Load Balancer.

October 21, 2024

by Mario Casari

· 11,361 Views · 5 Likes

How to Secure Your Raspberry Pi and Enable Safe, Resilient Updates

Learn how to safely encrypt and sign your Raspberry Pi filesystem and make reliably, recoverable updates easy and safe using hardware-based encryption.

October 21, 2024

by David G. Simmons

CORE

· 13,104 Views · 2 Likes

Securing Cloud-Native Applications: A CISO’s Perspective on Broken Access Control

Here is a CISO's perspective on preventing broken access control vulnerabilities and the components and importance of proper permission management for cloud-native apps.

October 18, 2024

by Gabriel L. Manor

· 5,725 Views · 2 Likes

Secure Golden Images: A Blueprint for Vulnerability Management

In this article, learn about securing your AWS EC2 instances by deploying Secure Golden Images (SGIs) at regular intervals.

October 18, 2024

by Jake Howering

· 6,060 Views · 3 Likes

GitHub Copilot Security and Privacy Concerns: Understanding the Risks and Best Practices

Worried about GitHub Copilot’s security and privacy concerns? Learn about potential risks and best practices while leveraging AI.

October 17, 2024

by Dwayne McDaniel

· 5,997 Views · 4 Likes

Acting Like We Care About Security

The final part of a 3-post series on why it's so hard for folks to care about security, and suggestions on ways to get them to start.

October 15, 2024

by Leon Adato

· 4,516 Views · 1 Like

Data at Rest Encryption: Protecting Stored Data

Discover different methods of data at rest encryption, including symmetric, asymmetric, and full-disk, to protect stored data from unauthorized access.

October 15, 2024

by Michael Chukwube

· 5,640 Views · 2 Likes

Oracle CloudWorld 2024: Key Takeaways for Developers, Engineers and Architects

Oracle CloudWorld 2024 unveils AI innovations, multi-cloud strategies, and industry solutions. Learn how these advancements will empower developers and engineers.

October 15, 2024

by Tom Smith

CORE

· 5,842 Views · 2 Likes

Decoding DORA: EU's Unified Approach to ICT Risk Governance

The Digital Operational Resilience Act (DORA) aims to establish a unified framework for managing ICT risks in the EU financial sector.

October 14, 2024

by Manjit Chakraborty

· 4,205 Views · 1 Like

How to Set up OAuth JWT Flow and mTLS in the Salesforce Connector for a MuleSoft App

Walk through the required steps to set up mutual TLS between the Mule app and the Salesforce Connected App we created in the first post of this series.

October 14, 2024

by GONZALO MARCOS

· 6,382 Views · 1 Like

What We Learned About Secrets Security at AppSec Village at DEF CON 32

Learn about DEF CON 32: AppSec Village, exploring secrets security challenges, common questions, and how to detect and handle hidden credentials effectively.

October 14, 2024

by Dwayne McDaniel

· 4,634 Views · 2 Likes

An Overview of TCPCopy for Beginners

In this article, learn more about TCPCopy, an open-source replay tool project, its underlying principles, and its architecture.

October 11, 2024

by Bin Wang

· 7,606 Views · 5 Likes

Network Guardians: Crafting a Spring Boot-Driven Anomaly Detection System

This article series will take you through the process of developing a network anomaly detection system using the Spring Boot framework in a robust manner.

October 11, 2024

by Sreejith Sreekandan Nair

· 6,876 Views · 4 Likes

The Importance of Verifying Your GitHub Environment’s Security Controls

Source code, being the most valuable asset of an organization, demands strong, reliable protection to safeguard it from potential threats.

October 9, 2024

by Daria Kulikova

· 7,052 Views · 3 Likes

Starting to Care About Security

IT practitioners get leaders to care about security by putting things in business (not technical) terms and using data to make their case.

October 8, 2024

by Leon Adato

· 4,600 Views · 1 Like

Security at the Onset: Stabilizing CSPM and DevSecOps

Proactively integrating CSPM with DevSecOps strengthens security by continuously monitoring and addressing vulnerabilities from development to deployment.

October 8, 2024

by Josephine Eskaline Joyce, Ph.D

CORE

· 7,150 Views · 4 Likes

Secret Management and Rotation

Learn about automating KMS key rotation for asymmetric keys to raise the security bar by replacing keys at an interval.

October 8, 2024

by Pranav Kumar Chaudhary

· 5,081 Views · 2 Likes

Integrate Spring Boot With jOOQ, Liquibase, and Testcontainers

Get started with jOOQ, Liquibase, and Testcontainers: Create a basic Spring Boot application and integrate the aforementioned techniques including a test setup.

October 7, 2024

by Gunter Rotsaert

CORE

· 6,198 Views · 1 Like

Enhanced API Security: Fine-Grained Access Control Using OPA and Kong Gateway

Kong secures APIs and OPA handles policy decisions. This custom plugin caches user data, minimizing database checks and ensuring fast, accurate access control.

October 4, 2024

by Amrutha Paladugu

· 7,403 Views · 5 Likes

The Latest Security Topics