Facilitating the Spread of Knowledge and Innovation in Professional Software Development

Unlock the full InfoQ experience

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources.

Don't have an InfoQ account?

Stay updated on topics and peers that matter to youReceive instant alerts on the latest insights and trends.
Quickly access free resources for continuous learningMinibooks, videos with transcripts, and training materials.
Save articles and read at anytimeBookmark articles to read whenever youre ready.

Logo - Back to homepage

News Articles Presentations Podcasts Guides

Topics

Development

Featured in Development

Are We Ready for the Next Cyber Security Crisis Like Log4shell?

Soroosh Khodami discusses why we aren't ready for the next Log4Shell. He shares live demos of dependency confusion and compromised builds, explaining how minor oversights gift hackers total system access. He explains the value of Software Bill of Materials (SBOM), dependency firewalls, and shifting security left to build resilient DevSecOps cultures that protect the modern software supply chain.

All in development

Architecture & Design

Featured in Architecture & Design

Security and Architecture: to Betray One is to Destroy Both

Shana Dacres-Lawrence explains the complex relationship between security and architecture, identifying three types of "betrayal" - physical, emotional, and trust - that lead to systemic failure. Drawing on real-world incidents like CrowdStrike and Change Healthcare, she shares five defense strategies: open communication, automation, tech integration, validation, and collaborative culture.

All in architecture-design

AI Infrastructure

Featured in AI, ML & Data Engineering

Optimization in Automated Driving: from Complexity to Real-Time Engineering

In this article, author Avraam Tolmidis discusses technical architecture of autonomous vehicles, with focus on optimization techniques like context-aware sensor fusion and Model Predictive Control (MPC) solvers to help with processing raw sensor data into safe control commands.

All in ai-ml-data-eng

Culture & Methods

Featured in Culture & Methods

From Friction to Flow: How Great DevEx Makes Everything Awesome

Nicole Forsgren discusses the "AI Productivity Paradox", explaining why generating code faster often makes deployment bottlenecks more expensive. She shares the DevEx framework to help architects and leaders systematically remove friction. Learn how to use DORA metrics and RICE prioritization to make a data-driven case for platform health.

All in culture-methods

DevOps

Featured in DevOps

Securing the AI Stack: From Model to Production

This eMag explores the shift from AI experimentation to production, where legacy defenses fall short. We dive into the critical trifecta of AI-driven phishing, model poisoning, and cloud governance. By rethinking security as a lifecycle responsibility, this issue provides a roadmap for securing the machine age through layered tactics, robust MLOps, and responsible deployment frameworks.