If you’re building an application that needs to go toward production, you’ll undoubtedly need to serve it up securely with SSL. What that entails varies from provider to provider, and you’ll encounter differing levels of complexity (and cost) in getting…
Tag: DZone Security Zone
The Impact of Biometric Authentication on User Privacy and the Role of Blockchain in Preserving Secure Data
Blockchain technology is a novel solution to privacy concerns and risks associated with the storage and maintenance of biometric data. Blockchain is a form of distributed ledger technology that shares infrastructure across several cybersecurity applications. It underlies cryptocurrencies such as…
The Future of Incident Response: SOAR’s Impact on Cybersecurity Defense
In February 2024, a slew of notable entities fell victim to cybercrime, ranging from UnitedHealth and the personal accounts of Axie Infinity’s co-founder to Hewlett Packard Enterprise, AnyDesk, and various French healthcare payment service providers like Viamedis and Almerys. Even…
Design Principles-Building a Secure Cloud Architecture
To navigate the digital landscape safely, organizations must prioritize building robust cloud infrastructures, and sanctuaries for their valuable data. The foundation of a secure cloud architecture requires steadfast principles and guiding decisions like invisible forces that form a resilient structure.…
10 Commandments of API-First Development
In the realm of software development, Application Programming Interfaces (APIs) are akin to a magic glue that binds different systems together, allowing them to communicate and work in harmony. An API acts as the user interface for API consumers and…
The Power of AI: Building a Robust Data Ecosystem for Enterprise Success
As enterprises strive to produce results rapidly in a dependable and sustainable manner, the significance of the underlying data becomes paramount. A major challenge in managing this data is the diverse set of capabilities required within a data architecture. It’s…
Secure Your API With JWT: Kong OpenID Connect
Good Old History: Sessions Back in the old days, we used to secure web applications with sessions. The concept was straightforward: upon user authentication, the application would issue a session identifier, which the user would subsequently present in each subsequent…
Exploring Zero-Trust Architecture Implementation in Modern Cybersecurity
Cyber threats are growing more sophisticated, frequent, and damaging, with the average cost of a data breach now reaching $4.24 million, according to IBM’s 2021 report. Clearly, organizations need more robust cybersecurity protections in place, which is leading many to…
Rethinking DevOps in 2024: Adapting to a New Era of Technology
As we advance into 2024, the landscape of DevOps is undergoing a transformative shift. Emerging technologies, evolving methodologies, and changing business needs are redefining what it means to implement DevOps practices effectively. This article explores DevOps’s key trends and adaptations…
Initializing Services in Node.js Application
While working on a user model, I found myself navigating through best practices and diverse strategies for managing a token service, transitioning from straightforward functions to a fully-fledged, independent service equipped with handy methods. I delved into the nuances of…
Understanding the 2024 Cloud Security Landscape
With technology and data growing at an unprecedented pace, cloud computing has become a no-brainer answer for enterprises worldwide to foster growth and innovation. As we swiftly move towards the second quarter of 2024, predictions by cloud security reports highlight…
Building a Sustainable Data Ecosystem
Generative Artificial Intelligence (AI) has emerged as a transformative technology with vast potential for innovation across various sectors. However, the widespread adoption of generative AI raises significant concerns regarding privacy, fairness, and accountability, particularly in data sharing. This article explores…
Four Common CI/CD Pipeline Vulnerabilities
The continuous integration/continuous delivery (CI/CD) pipeline represents the steps new software goes through before release. However, it can contain numerous vulnerabilities for hackers to exploit. 1. Vulnerabilities in the Code Many software releases get completed on such tight time frames…
Elevate Your Security Posture: Grafana for Real-Time Security Analytics and Alerts
In the digital age, where data breaches and cyber threats loom large, ensuring the security of your digital assets is paramount. Businesses are in dire need of robust tools that not only detect threats in real time but also provide…
Cohesity Simplifies Data Management and Security for Developers
As a developer, engineer, or architect, managing and securing growing volumes of data across multiple environments can be a complex and time-consuming task. Cohesity, a leading data management company, recently presented at the 54th IT Press Tour, highlighting how their…
7 Essential Practices for Secure API Development
In the interconnected realm of modern software architecture, Application Programming Interfaces (APIs) are the fundamental building blocks that allow disparate systems, applications, and services to communicate with each other. They facilitate the exchange of data and functionality, enabling a seamless…
Navigating the Shift: Mastering Pod Security in Kubernetes
In the rapidly evolving landscape of Kubernetes, security remains at the forefront of concerns for developers and architects alike. Kubernetes 1.25 brings significant changes, especially in how we approach pod security, an area critical to the secure deployment of applications.…
How Secure Cloud Development Replaces Virtual Desktop Infrastructures
Why Do Organizations Need Secure Development Environments? The need to secure corporate IT environments is common to all functions of organizations, and software application development is one of them. At its core, the need for securing IT environments in organizations…
OWASP Top 10 Explained: SQL Injection
Cyberattacks are a common and permanent threat. This paper is the first in a series about cybersecurity. The aim is to provide software engineers with an understanding of the main threats and how to address them. Most exploits are based…
When a Data Mesh Doesn’t Make Sense for Your Organization
Hype is a funny thing. Sometimes you find yourself in a Godfather Part 2 situation where the hype is totally justified. You hear about it. You try it. Life is changed. Hooray! Other times, you find yourself in more of…