Machine learning models don’t succeed in isolation — they rely on robust systems to validate, monitor, and explain their behavior. Top tech companies such as Netflix, Meta, and Airbnb have invested heavily in building scalable experimentation and ML platforms that…
Tag: DZone Security Zone
The Next Frontier in Cybersecurity: Securing AI Agents Is Now Critical and Most Companies Aren’t Ready
You can’t secure what you don’t understand, and right now, most enterprises don’t understand the thing running half their operations. Autonomous AI agents are here. They’re booking appointments, executing trades, handling customer complaints, and doing it all without waiting for…
Software Security Treat or Threat? Leveraging SBOMs to Control Your Supply Chain Chaos [Infographic]
Editor’s Note: The following is an article written for and published in DZone’s 2025 Trend Report, Software Supply Chain Security: Enhancing Trust and Resilience Across the Software Development Lifecycle. Software supply chain security is on the rise as systems advance and…
Secure Private Connectivity Between VMware and Object Storage: An Enterprise Architecture Guide
As an architect, security is the first thing that comes to mind when defining an architecture for a customer. One of the key things that you need to keep in mind is minimizing the network traffic routed through the public…
Development of System Configuration Management: Introduction
Series Overview This article is part 1 of a multi-part series: “Development of system configuration management.” The complete series: This article has been indexed from DZone Security Zone Read the original article: Development of System Configuration Management: Introduction
Data Mesh Security: How to Protect Decentralized Data Architectures
The rise of data mesh architectures redefines how modern organizations have approached the concept of data security. Standard best practices dictate that data should be centralized, allowing it to be collected, stored, and governed within monolithic systems, such as data…
Designing Secure APIs: A Developer’s Guide to Authentication, Rate Limiting, and Data Validation
APIs have emerged as the cement of the contemporary application. APIs are at the heart of the movement of data, and the interaction of systems, whether in the form of mobile apps and web frontends or microservices and third-party integrations.…
JWT Policy Enforcement, Rate Limiting, IP White Listing: Using Mulesoft, API Security, Cloudhub 2.0
This tutorial is all about implementing JWT Policy Enforcement in API Manager using a sample RAML-based project. It’s especially helpful when applying policies through the API Manager in the Anypoint Platform. Along the way, you’ll also learn how to secure…
Compliance Automated Standard Solution (COMPASS), Part 9: Taking OSCAL-Compass to Industry Complexity Level
(Note: A list of links for all articles in this series can be found at the conclusion of this article.) In parts 2 and part 3 of this blog series, we introduced the open-source Trestle SDK, which implements the NIST…
Why Developers Should Pay Attention to Internal Directory Security
Most developers don’t start their day thinking, “Is our internal directory secure?” They’ve got builds to run, bugs to squash, maybe a pull request or five to review. But internal directories (like Active Directory or Azure AD) aren’t just a…
Self-Managed Keycloak for App Connect Dashboard and Designer Authoring
With the release of the IBM® App Connect Operator version 12.1.0, you can now use your existing Keycloak instance to configure authentication and authorization for App Connect Dashboard and Designer Authoring. Building on top of the capability to use Keycloak,…
What Developers Need to Know About IP API Privacy in Mobile Apps (2025 Update)
In 2025, mobile applications are smarter, faster, and increasingly location-aware. From e-commerce personalization to regional compliance, knowing where a user is located adds critical context to the user experience. While GPS provides the most accurate location data, it isn’t always…
Set Up OpenID Connect With Keycloak: A Step-by-Step Guide
In this blog, you will learn how to set up the OpenID Connect Authorization Code Flow using Keycloak. You will execute the flow yourself in order to get a better understanding of OIDC. Enjoy! Introduction Adding security to your application…
Bring Your Own Feed (BYOF): An Engineer’s Guide to Effective Threat Intelligence
As software continues to eat the world, and AI becomes a force multiplier for attackers, those of us tasked with defending our systems have to be more focused, deliberate, and proactive in our approaches. We have to rise up to…
The Developer’s Guide to Cloud Security Career Opportunities
Your organization’s entire infrastructure moved to the cloud last year, but your security team is still thinking like it’s 2015. They’re applying traditional network security controls to cloud environments, creating bottlenecks that slow down your deployments and leave massive security…
Federated Identity: The Modern Approach to Cloud Security and Automation
In the rapidly evolving landscape of cloud automation and multi-cloud strategies, the secure handling of sensitive data, particularly credentials, has emerged as a paramount concern. Traditional methods of storing long-lived credentials, whether in configuration files, CI/CD pipelines, or dedicated secret…
Building Secure Transaction APIs for Modern Fintech Systems Using GitHub Copilot
GitHub Copilot is not just a new tool anymore. It’s becoming a code productivity accelerator tool. In regulated industries like fintech, where speed must match uncompromising security standards. AI-assisted coding can shift the developer workflow from reactive to proactive. In…
Why Most IaC Strategies Still Fail (And How to Fix Them)
Infrastructure as Code (IaC) was supposed to solve the chaos of cloud operations. It promised visibility, governance, and the ability to scale infrastructure with confidence. But for many teams, the reality is far from ideal. Instead of clarity and control,…
AI-Driven Threat Hunting: Catching Zero-Day Exploits Before They Strike
Picture this: you’re a cybersecurity pro up against an invisible enemy. Hidden in your network are zero-day exploits, which represent unknown vulnerabilities that await their moment to strike. The time you spend examining logs becomes pointless because the attack might…
Implementing Secure Multi-Tenancy in SaaS Applications: A Developer’s Checklist
Secure Multi-Tenancy Implementation Guide As a developer who has worked extensively with SaaS applications, I’ve learned that implementing secure multi-tenancy is one of the most critical aspects of building scalable software-as-a-service platforms. Through my experience, I’ve compiled this comprehensive checklist…