Microservices architecture has become extremely popular in recent years because it allows for the creation of complex applications as a collection of discrete, independent services. Comprehensive testing, however, is essential to guarantee the reliability and scalability of the software due…
Category: DZone Security Zone
Generative AI in the Crosshairs: CISOs’ Battle for Cybersecurity
ChatGPT and large language models (LLM) are the early signs of how generative AI will shape many business processes. Security and risk management leaders, specifically CISOs, and their teams need to secure how their organization builds and consumes generative AI…
Securing Your CI/CD: An OIDC Tutorial
Let’s start with a story: Have you heard the news about CircleCI’s breach? No, not the one where they accidentally leaked some customer credentials a few years back. This time, it’s a bit more serious. It seems that some unauthorized…
Safeguarding Software: The World of Software Piracy Protection Systems
In the digital realm, where lines of code traverse the vast expanses of the internet, software developers find themselves in a constant battle to protect their creations from pirates seeking to exploit their hard work. The arena for this clash…
Zero Trust Architecture: Enterprise Infrastructure
Importance of Security in Financial Institutions Security in financial institutions is of paramount importance due to the highly sensitive nature of the data they handle. These institutions hold vast amounts of personal and financial information of their customers, making them…
Fencing in Distributed Systems: Twitter’s Approach
Fencing is a crucial technique used in distributed systems to protect shared resources and maintain system stability. It involves isolating problematic nodes or preventing them from accessing shared resources, ensuring data integrity and overall system reliability. In this article, we…
Security Best Practices for ReactJS in Web App Development
In today’s digital age, web applications have become an integral part of our lives. From online banking to social media and e-commerce, we rely on web apps for a multitude of tasks. With the increasing complexity and sophistication of web…
Leveraging the Potential: The Superiority of Third-Party Tools in Multi-Cloud CSPM
Cloud Security Posture Management (CSPM) is an exquisite facet of the realm of IT security tools, meticulously designed to address the intricate intricacies of cloud compliance risks and potential misconfigurations. To identify potential deficiencies in security policies, the Cloud Security…
Five Key Considerations for Building DeFi APIs
Decentralized Finance (DeFi) is a financial service based on ledgers, just like the ones used by cryptocurrencies. In the U.S., DeFi technology challenges the current centralized finance system by empowering individuals to manage their own financial exchanges via a crypto…
Unlocking AES Encryption: A Deep Dive Into Its Inner Workings for Secure Data Protection
In an increasingly digital world, the security of our information has become paramount. Whether we are sending sensitive emails, conducting financial transactions online, or storing confidential documents, the need to protect our data from prying eyes has never been more…
How Global Tenanted Deployments Would Look Without Automation
Continuous Integration and Continuous Delivery’s recommendation of deployment automation is hugely important for organizations with complex software. That’s especially true for multi-tenancy software delivered with tenanted deployments. But what if we didn’t have deployment automation? How would tenanted deployments even…
HIPAA Compliance Testing In Software: Building Healthcare Software With Confidence
HIPAA has governed the healthcare software market for almost three decades. But, as ubiquitous as it is, not every healthcare organization is either willing to make sure their application is compliant with HIPAA or has the skills and resources to…
Data Anonymization in Test Data Management
The potential for data analytics to unlock economic opportunities is immense; however, as this potential expands, it also gives rise to new privacy challenges. Data anonymization is a crucial technique in this landscape, ensuring that sensitive information is removed or…
Types of Edge ML and Enterprise Use Cases
In the ever-evolving landscape of artificial intelligence (AI), one of the most exciting advancements is the integration of Edge Machine Learning (Edge ML). This revolutionary technology empowers devices to perform AI-driven tasks locally, on the edge, rather than relying solely…
The Art of Protecting Secrets: Eight Essential Concepts for SecOps Practitioners
Secrets, secrets, … and more secrets! You probably know that in an ever-expanding world of digital services, secrets are sprawling faster than ever. As security practitioners, we are expected to manage this ever-growing list of sensitive tokens, keys, and certificates…
Navigating Azure Project Management: A Deep Dive Into Efficient Operations and Deployment
In today’s digital landscape, cloud computing platforms have become essential for businesses seeking scalable, reliable, and secure solutions. Microsoft Azure, a leading cloud provider, offers a wide range of services and resources to meet the diverse needs of organizations. In…
Preventing SQL Injection Attacks With DbVisualizer
SQL injection attacks are a major threat to database security, and they can result in data breaches, loss of sensitive information, or even complete system compromise. As a database administrator or developer, it’s essential to understand the risks associated with…
Mixing Kubernetes Roles, RoleBindings, ClusterRoles, and ClusterBindings
At some point, as your Kubernetes cluster grows in complexity, the question of role-based security will become important. Typically, this means breaking the cluster up into namespaces and limiting access to namespaced resources to specific accounts. To support this, Kubernetes…
Unlocking Data Insights and Architecture
This is an article from DZone’s 2023 Data Pipelines Trend Report. For more: Read the Report Data management is an ever-changing landscape, but throughout its history, a few use cases have driven most of the value and hence the majority…
Function’s Anatomy and Beyond
Writing clean, understandable, easy-to-support, and maintain code is hard and requires many years of experience. At least we’re used to thinking this way. What if there is a way to write such a code consciously and without spending years and…
Backend For Frontend (BFF) Pattern
What is BFF? The Backend for Frontend (BFF) design pattern involves creating a backend service layer specifically tailored to the requirements of a particular frontend application or a set of closely related frontends. While traditionally this approach has been contrasted…
Modern Data Backup Strategies for Safeguarding Your Information
In a rapidly changing business environment, data backup strategies for small and large organizations have evolved beyond traditional methods. Data ecosystems’ growing complexity and potential risks highlight the need for comprehensive data backup and recovery strategies. Many organizations experience data…
Cloud Migration: How To Overcome Fears and Capitalize on Opportunities
Cloud computing has been a major trend for a decade. In 2015, it saw triple-digit annual growth. Although by the end of 2019, the largest cloud providers grew at a slower rate, just 31% annually, and this rate was expected…
DevOps and Platform Engineering
In this post, you discover where Platform Engineering fits into your broader software delivery process. You see how Platform Engineering works with a DevOps process and why both DevOps and Platform Engineering can help your organization attain high performance. The…
Safeguard Your AWS Account: IAM Best Practices
Amazon Web Services (AWS) provides extensive cloud computing services. These services equip businesses with the flexibility, scalability, and reliability necessary for their operations. Security becomes a paramount concern as organizations shift their activities to the cloud. The AWS Identity and…
Post-Pandemic Cybersecurity: Lessons Learned and Predictions
We’re all getting used to life after the immense global crisis caused by COVID-19. One thing is clear – our world, especially when it comes to computers and technology, will never be the same. I’ve worked in cybersecurity for twenty…
What Is Web App Penetration Testing?
It is also known as web app pen-testing or security testing, which is an organized evaluation of a web application’s security to identify exposure and debility that could be exploited by malicious performers. The main goal of penetration testing is…
Simplifying Blockchain Development by using Abstraction
Blockchain has the potential to revolutionize the way we interact with the digital world. It promises security, transparency, and decentralization. However, for most people, getting started with blockchain can be confusing and intimidating. The need to manage private keys and…
Multi-Tenancy With Keycloak, Angular, and SpringBoot
To propose an implementation, we will present a use case that allows us to define the requirements. We will describe the functional and technical context in which we will operate and then specify the requirements. Based on these requirements, we…
SwiftData Dependency Injection in SwiftUI Application
Most of the examples Apple provides to demonstrate Dependency Injection in SwiftUI use @Environment. When creating a new project with SwiftData in XCode, you’ll notice that the template uses Environment for injecting the modelContext. Swift struct ContentView: View {…
Smart Contract Language Comparison: Solidity vs. Cadence vs. Move
When starting a new web3 project, it’s important to make the right choices about the blockchain and smart contract language. These choices can significantly impact the overall success of your project as well as your success as a developer. In…
The Rise of Biometric Security: Protecting Data in the Future of Cybercrime
While ushering in an era of unparalleled connectivity, the digital revolution has also opened the floodgates to a plethora of security challenges. As cybercriminals employ increasingly sophisticated methods, the traditional bastions of digital security, such as alphanumeric passwords, are proving…
What You Must Know About Rate Limiting
Rate limiting is the concept of controlling the amount of traffic being sent to a resource. How can you achieve this control? By means of a rate limiter – a component that lets you control the rate of network traffic…
The Winds of Change: How Generative AI is Revolutionizing Cybersecurity
Generative AI (GenAI) is transforming businesses in nearly every industry, and cybersecurity is no exception. As a $30 billion global IT services firm, NTT Data is on the leading edge of harnessing generative AI while managing the risks. I recently…
Modbus Protocol: The Grandfather of IoT Communication
The Modbus protocol is a communication protocol that allows devices to communicate over various types of media, such as serial lines and ethernet. It was developed in 1979 by Modicon, a company that produced Programmable Logic Controllers (PLCs), to enable…
Unlocking the Secrets of DevSecOps: The Essential Lifecycle Stages
Organizations today are constantly seeking ways to deliver high-quality applications faster without compromising security. The integration of security practices into the development process has given rise to the concept of DevSecOps—a methodology that prioritizes security from the very beginning rather…
Challenge Your Cybersecurity Systems With AI Controls in Your Hand
Since the inception of the internet, cyber security has been one of the prime points to ponder. Protecting computers, mobile devices, electronic systems, servers, networks, and data from nefarious attacks from cyber miscreants. Today, AI has become the epicenter of…
Navigating the Skies
This is an article from DZone’s 2023 Database Systems Trend Report. For more: Read the Report In today’s rapidly evolving digital landscape, businesses across the globe are embracing cloud computing to streamline operations, reduce costs, and drive innovation. At the…
Gossips on Cryptography: Part 1 and 2
In this blog series, We will learn about encryption and decryption basics in a very casual fashion. We will start discussing from origin of cryptography and then learn about modern techniques. One of the important and main techs in encryption…
Implementing Stronger RBAC and Multitenancy in Kubernetes Using Istio
Background of Multitenancy DevOps and solution architects often implement RBAC and multitenancy in their Kubernetes infrastructure to achieve isolation of workspace and allow authorized persons to access resources with least privilege resources. The implementation of RBAC and multitenancy can be…
Future Skills in Cybersecurity: Nurturing Talent for the Evolving Threatscape
As we stand at the precipice of an increasingly digitized world, the challenges of emerging cyber threats are becoming more complex. With 20 years of experience as a cybersecurity professional, I have seen this evolution firsthand. The need for skilled…
When To Boost Your Authentication Strategy: Signs for Security Enhancement
Authentication is undoubtedly one of the first encounters of a user when they land on your platform. Friction in the overall authentication process could be the reason for your users to switch to your competitors. A smooth authentication is the…
What Is Good Database Design?
This is an article from DZone’s 2023 Database Systems Trend Report. For more: Read the Report Good database design is essential to ensure data accuracy, consistency, and integrity and that databases are efficient, reliable, and easy to use. The design…
Understanding Europe’s Cyber Resilience Act and What It Means for You
IoT manufacturers in every region have a host of data privacy standards and laws to comply with — and Europe is now adding one more. The Cyber Resilience Act, or CRA, has some aspects that are simply common sense and…
BSidesAustin 2023: CyberSecurity In The Texas Tech Capital
Austin, Texas, is a city filled with music, vibrant nightlife, and some legendary BBQ. It is also one of the great tech hubs of the southern United States, home to a wide variety of tech innovators like Indeed, SolarWinds, and…
Nine Benefits of Offshore Software Development
In today’s highly competitive business landscape, staying ahead of the curve often means leveraging the expertise and resources available around the globe. Offshore software development has emerged as a strategic approach for companies looking to optimize their software development processes…
Information Security: AI Security Within the IoT Industry
As the digital age progresses, we find ourselves amidst numerous ways of transmitting and storing information. From the smart devices that indwell our homes to the advanced artificial intelligence systems powering industries, the intertwining of technology with our daily lives…
Top 7 Best Practices DevSecOps Team Must Implement in the CI/CD Process
Almost every organization has implemented CI/CD processes to accelerate software delivery. However, with this increased speed, a new security challenge has emerged. Deployment speed is one thing, but without proper software checks, developers may inadvertently introduce security vulnerabilities, leading to…
Rethinking Quality Assurance in the Age of Generative AI
Generative AI is enabling software developers to create more code much faster than before. For software quality test engineers entrusted with assuring that applications get released on time and without bugs, GenAI presents both a challenge and a solution for…
How To Secure Your CI/CD Pipelines With Honeytokens
In the realm of software development, Continuous Integration and Continuous Deployment (CI/CD) pipelines have become integral. They streamline the development process, automate repetitive tasks, and enable teams to release software quickly and reliably. But while CI/CD pipelines are a marvel…
Exploring the Evolution and Impact of Computer Networks
In today’s interconnected world, computer networks have become the backbone of modern communication and information exchange. They enable the seamless transmission of data, facilitate collaboration, and connect individuals and devices across the globe. This article delves into the evolution, components,…
Why Is SaaS Compliance Important?
In the dynamic landscape of the digital era, the significance of SaaS (Software as a Service) has escalated exponentially. As we venture into 2023, the emphasis on SaaS compliance has become a focal point for businesses globally. In this comprehensive…
How To Learn Secure Software Development Lifecycle (SDLC)
Secure software development is crucial to safeguarding sensitive data and protecting against cyber threats. Learning the ins and outs of the Secure Software Development Lifecycle (SDLC) is a fundamental step for anyone aspiring to become a proficient software developer. In…
The Promise and Peril of Generative AI for Cybersecurity
A recent panel discussion at Black Hat 2023, Generative AI: Security Friend or Foe?, provided insights into how generative AI models like ChatGPT could impact security teams. Kelly Jackson, Editor-in-Chief of Dark Reading, moderated the roundtable with cybersecurity leaders Josh…
Four Ways for Developers To Limit Liability as Software Liability Laws Seem Poised for Change
For many years, the idea of liability for defects in software code fell into a gray area. You can find debate about the topic going back and forth since at least the early 1990s. Throughout, software developers argued that they shouldn’t…
DevSecOps: Integrating Security Into Your DevOps Workflow
The need for speed, agility, and security is paramount in the rapidly evolving landscape of software development and IT operations. DevOps, focusing on collaboration and automation, has revolutionized the industry. However, in an era where digital threats are becoming increasingly…
Unleashing the Power of On-Premise MFA_ Elevate Active Directory Security
In today’s digital age, the backbone of any organization’s IT infrastructure is its Active Directory (AD). This centralized directory service manages authentication and authorization, making it critical for safeguarding sensitive data and maintaining system integrity. However, as the technological landscape…
Hardcoded Secret at the Heart of the Dell Compellent VMware Vulnerability
In August, Dell disclosed vulnerability CVE-2023-39250 where “A local low-privileged malicious user could potentially exploit this vulnerability to retrieve an encryption key that could aid in further attacks.” This actively affects Dell Storage Integration Tools for VMware (DSITV) customers. Learn…
Decoding Business Source Licensing: A New Software Licensing Model
Business source licensing (BSL) has recently emerged as an alternative software licensing model that aims to blend the benefits of both open-source and proprietary licensing. For developers and IT professionals evaluating solutions, understanding what BSL is and its implications can…
Breach and Attack Simulation Technology (Short Version)
The ever-evolving cybersecurity landscape presents growing challenges in defending against sophisticated cyber threats. Managing security in today’s complex, hybrid/multi-cloud architecture compounds these challenges. This article explores the importance of demonstrating cybersecurity effectiveness and the role of Breach and Attack Simulation…
How To Validate Archives and Identify Invalid Documents in Java
In our contemporary cybersecurity landscape, sneaky custom content threats are beginning to penetrate our email security policies and firewalls/virus-scanning network proxies with greater consistency. Aptly disguised files can easily wind their way into our inboxes and our most sensitive file…
Deploy a Session Recording Solution Using Ansible and Audit Your Bastion Host
Learn how to record SSH sessions on a Red Hat Enterprise Linux VSI in a Private VPC network using in-built packages. The VPC private network is provisioned through Terraform and the RHEL packages are installed using Ansible automation. What Is…
UX Is Critical for Zero-Trust
Implementing a zero-trust framework is essential to any website’s security — everything must be verified and authenticated. It ensures data integrity and prioritizes safety for everyone involved, especially the users. The Relationship Between UX and Security Prioritizing security and nothing…
How To Repair Failed Installations of Exchange Cumulative and Security Updates
To patch the Exchange Servers against known threats and fix bugs and vulnerabilities, Microsoft releases Cumulative and Security updates on a regular basis. These updates also provide new features, security patches, and various other fixes. Usually, the installation of these…
Securing Tomorrow: Unleashing the Power of Breach and Attack Simulation (BAS) Technology
As the cybersecurity landscape continues to evolve, the challenges associated with defending against cyber threats have grown exponentially. Threat vectors have expanded, and cyber attackers now employ increasingly sophisticated tools and methods. Moreover, the complexity of managing security in today’s…
Next-Gen Threat Hunting Techniques With SIEM-SOAR Integration
In the constantly shifting realm of cybersecurity, remaining ahead of emerging threats is no longer merely an aspiration but an imperative. With cyber adversaries continuously enhancing their skills and tenacity, businesses are progressively embracing cutting-edge technologies and inventive tactics to…
Why You Shouldn’t Test on Rooted Devices
“Mobile is becoming not only the new digital hub but also the bridge to the physical world.”– Thomas Husson, VP and Principal Analyst at Forrester Research Mobile devices have become an inevitable part of organizations’ strategies to do more with…
Safeguarding Your Organization: Insights for IT Pros During National Insider Threat Awareness Month
September marks National Insider Threat Awareness Month (NITAM), an annual campaign dedicated to shedding light on the risks posed by trusted insiders. Whether employees, contractors, partners, or collaborators, these authorized individuals have the potential to intentionally or accidentally cause significant…
Securing Your Applications With Spring Security
In today’s increasingly digital world, securing your applications has become paramount. As developers, we must ensure that our applications are protected from unauthorized access and malicious attacks. One popular solution for securing Java applications is Spring Security, a comprehensive and…
What Is Privacy by Design?
Privacy by Design (PbD) is an approach to systems engineering that aims to embed privacy into every stage of the development process and across the entire organization from day one. Privacy is too often overlooked or solely an afterthought. Policies…
Researcher Finds GitHub Admin Credentials of Car Company Thanks to Misconfiguration
On August 21, 2023, security researcher and HackerOne Advisory Board Member Corben Leo announced on social media that he had “hacked a car company” and went on to post a thread explaining how he “gained access to hundreds of their codebases.”…
The Promise of Personal Data for Better Living
Emerging technologies are unlocking new possibilities for gathering and leveraging data from personal devices to provide highly customized and contextualized user experiences. As Dr. Poppy Crum, CTO, and neuroscientist, highlighted in her Technology and Human Evolution presentation at TIBCO Next,…
Fortifying the Cloud: A Look at AWS Shield’s Scalable DDoS Protection
As businesses shift operations to the cloud, robust security is crucial. DDoS attacks pose significant threats to cloud-based services, aiming to disrupt infrastructure and cause downtime and financial losses. AWS Shield from Amazon Web Services provides comprehensive DDoS protection, fortifying…
New Free Tool From Contrast Security Makes API Security Testing Fast and Easy
Developing secure APIs is crucial, but testing them thoroughly can be time-consuming and difficult without the right tools. A new offering called CodeSec from application security provider Contrast Security aims to make robust API security testing quick, accurate, and accessible…
Gradle Version Catalogs on Android
Gradle version catalogs allow us to add and maintain dependencies in an easy and scalable way. Apps grow, and managing projects with several development teams increases the compilation time. One potential solution to address this issue involves segmenting the project…
Spring Authentication With MetaMask
When choosing a user authentication method for your application, you usually have several options: develop your own system for identification, authentication, and authorization, or use a ready-made solution. A ready-made solution means that the user already has an account on…
The Role of Threat Modeling in Software Development: A Cybersecurity Perspective
In today’s digitally interconnected world, software plays an integral role in our daily lives. From online banking and e-commerce to healthcare and transportation, software applications are at the heart of our technological infrastructure. However, with the increasing reliance on software,…
Why GraphQL API Security Is Unique
Enterprise security teams have had since 2015 to familiarize themselves with GraphQL API security. But many — if not most — still haven’t captured the security nuances of the popular open-source query language. Simply understanding GraphQL’s processes and vulnerable attack…
Unpacking the New National Cybersecurity Strategy: Key Takeaways for Developers and Security Experts
At Black Hat 2023, Kemba Walden, Acting National Cyber Director at the White House, outlined a new national cybersecurity strategy aimed at strengthening defenses through workforce development and technology initiatives. For developers and technology professionals, this strategy has major implications,…
Making Life Easier for Developers: How Fastly’s Edge Cloud Platform Simplifies App Security for Developers
In the constant struggle between security and agility, developers often draw the short straw. Tasked with rapidly building and deploying code, engineers get bogged down handling security incidents or remediating vulnerabilities. The friction between creating quickly and creating securely slows…
The Top Cybersecurity Risks in Agile Software Development
Agile software development has transformed how software is created and delivered. It fosters collaboration, flexibility, and quick development cycles, making it appealing to many teams. However, Agile’s numerous advantages come with specific cybersecurity risks that developers must address. In this…
A Comprehensive Approach To Enhancing IoT Security With Artificial Intelligence
In today’s interconnected society, the Internet of Things (IoT) has seamlessly integrated itself into our daily lives. From smart homes to industrial automation, the number of IoT devices continues to grow exponentially. However, along with these advancements comes the need…
Protect Your Keys: Lessons from the Azure Key Breach
On July 11, 2023, Microsoft released details of a coordinated attack from threat actors, identified as Storm-0558. This state-sponsored espionage group infiltrated email systems in an effort to collect information from targets such as the U.S. State and Commerce Departments.…
JWT Token Revocation: Centralized Control vs. Distributed Kafka Handling
Tokens are essential for secure digital access, but what if you need to revoke them? Despite our best efforts, there are times when tokens can be compromised. This may occur due to coding errors, accidental logging, zero-day vulnerabilities, and other…
Identity and Access Management Best Practices
Identity and access management (IAM) is fundamental to modern cybersecurity and operational efficiency. It allows organizations to secure their data, comply with regulations, improve user productivity, and build a strong foundation for trustworthy and successful business operations. A robust IAM…
Best Practices To Secure Data Transmission
In today’s interconnected global marketplace, secure data transmission is more crucial than ever. As digital platforms become increasingly important for financial transactions and personal communications, ensuring the integrity and confidentiality of data is vital. If someone gets unauthorized access to…
Implementing Zero-Trust in Enterprise Environments
In the face of ever-changing threats and complex infrastructures, the zero-trust architecture represents an important transformation in our understanding and implementation of security. This innovative approach promises not only increased protection but also increased adaptability and efficiency in infrastructure management.…
Understanding Google Analytics 4, Server-Side Tracking, and GDPR Compliance
In today’s digital landscape, data privacy and accurate analytics are paramount for businesses striving to make informed decisions. Google Analytics 4 (GA4) brings a new dimension to data privacy and tracking methods, including cookie-less tracking and server-side tracking. Growing worries…
Unveiling Vulnerabilities via Generative AI
Code scanning for vulnerability detection for exposure of security-sensitive parameters is a crucial practice in MuleSoft API development. Code scanning involves the systematic analysis of MuleSoft source code to identify vulnerabilities. These vulnerabilities could range from hardcoded secure parameters like…
One-Click Deploying EMQX MQTT Broker on AWS Using Terraform
MQTT is a lightweight messaging protocol commonly used in IoT (Internet of Things) applications to enable communication between devices. As a popular open-source MQTT broker, EMQX provides high scalability, reliability, and security for MQTT messaging. By using Terraform, a widespread…
One-Click Deploying EMQX MQTT Broker on Azure Using Terraform
MQTT is a lightweight messaging protocol used in the Internet of Things (IoT) to enable communication between devices. As a popular open-source MQTT broker, EMQX provides high scalability, reliability, and security for MQTT messaging. By using Terraform, a widespread Infrastructure…
Creating a Custom Starter With Spring Boot 3
Starters are an integral part of the Spring Boot application. In addition to dependency versioning, they provide the ability to describe the configuration for a particular functionality. They gained their popularity due to the development of microservice architecture. When we…
Single-Tenant vs. Multi-Tenant Architecture: Breaking Down the Key Differences
SaaS applications and services are at the core of today’s businesses, and a quick glance at the market indicates that this trend isn’t going to stop anytime soon. Gartner forecasts that SaaS spending will reach $197 billion in 2023, up…
How To Check Office Files for Macros Using Java
The Microsoft OpenXML files we use on a day-to-day basis are conveniently designed to be accessed and manipulated programmatically. We can jump into any OpenXML file structure in a variety of capacities (usually via specialized programming libraries or APIs) to…
CockroachDB TIL: Volume 13
Previous Articles Volume 1 Volume 2 Volume 3 Volume 4 Volume 5 Volume 6 Volume 7 Volume 8 Volume 9 Volume 10 Volume 11 Volume 12 Topics Topic 1: Diagnose certificate-based authentication Topic 2: Differences between cockroach and psql clients…
Applications and SaaS Plugins: Data Exfiltrations
Since most security administrators have little insight into cloud-to-cloud connections, monitoring and protecting data throughout these communications is challenging. This article will examine the issue and potential remedies. What Exactly Is a ‘Plug-In’ in a SaaS System? A plug-in SaaS…
Harnessing Security by Adopting Zero Trust Architecture
Over the past several years, Zero Trust Architecture (ZTA) has gained increased interest from the global information security community. Over the years, several organizations have adopted Zero Trust Architecture (ZTA) and experienced considerable security improvements. One such example is Google,…
Software Engineering in the Age of Climate Change: A Testing Perspective
As the global community grapples with the urgent challenges of climate change, the role of technology and software becomes increasingly pivotal in the quest for sustainability. There exist optimization approaches at multiple levels that can help: Algorithmic efficiency: Algorithms that…
Bridging AI and Ethics: Comprehensive Solutions in Healthcare Implementation
In the rapidly evolving landscape of healthcare, Artificial Intelligence (AI) has emerged as a transformative force, promising to reshape the industry with its potential to improve diagnostics, personalize patient care, and streamline administrative tasks. AI Chatbots, like the UK-based Babylon…
Role of C# in Building Dynamic and Secure Web Applications
Are you looking to develop dynamic and secure web applications? If so, then C# (pronounced as “C sharp”) is a powerful programming language that can meet your requirements. C# is widely used in web development due to its versatility, performance,…