InfoQ Homepage Security Content on InfoQ

Articles

RSS Feed

Newer Older

DevOps

Debugging Production: eBPF Chaos

This article shares insights into learning eBPF as a new cloud-native technology which aims to improve Observability and Security workflows. You’ll learn how chaos engineering can help, and get an insight into eBPF based observability and security use cases. Breaking them in a professional way also inspires new ideas for chaos engineering itself.

Michael Friedrich
on Jun 20, 2023
DevOps

Learning eBPF for Better Observability

This article shares insights into learning eBPF as a new cloud-native technology which aims to improve Observability and Security workflows. Learn how to practice using the tools, and dive into your own development. Iterate on your knowledge step-by-step, and follow-up with more advanced use cases later.

Michael Friedrich
on May 19, 2023
DevOps

When DevOps Meets Security to Protect Software

Security can no longer be an afterthought in the software development process. Collaboration between security and development needs to happen early to be effective.

Franklyne Omondi
on Apr 03, 2023
DevOps

Accelerating the Secure Software Delivery Lifecycle with GitOps

Building secure software can be complicated and time-consuming. By employing a GitOps model, security can be safely separated from development, simplifying the delivery process and increasing velocity.

Gopinath Rebala
on Mar 27, 2023
Architecture & Design

The Process of Creating Decentralized Apps (dApps)

A decentralized application has a different architectural approach; they are working on distributed ledger technology called blockchain, where there is no central point of failure nor third parties involved. A revolutionary and attractive technology for new opportunities. This article covers creating such applications and why they are needed, as well as challenges during implementation.

Ognyan Chikov
on Feb 22, 2023
Culture & Methods

Secure Delivery: Better Workflows for Secure Systems and Pain-Free Delivery

The software delivery process has been transformed in the last decade; we’ve adopted well-understood workflows around functions such as testing, release management and operational support. In this article we'll explore the impact that security workflows have on software delivery, explain the root causes and share battle-proven techniques to show how we can make delivering secure software easier.

Chris Rutter
on Feb 10, 2023
DevOps

Data Protection Methods for Federal Organizations and beyond

The Federal Data Strategy describes a plan to “accelerate the use of data to deliver on mission, serve the public, and steward resources while protecting security, privacy, and confidentiality." This article covers what it is and how it can be applied to any organization.

Alex Tray
on Jan 18, 2023
DevOps

The Importance of Pipeline Quality Gates and How to Implement Them

A quality gate is an enforced measure built into your pipeline that the software needs to meet before it can proceed. This article covers how to get the maximum benefit from quality gates. Making good use of quality gates not only can improve the quality of your software, but it can also improve your delivery speed.

Craig Risi
on Dec 27, 2022
DevOps

API Security: from Defense-in-Depth (DiD) to Zero Trust

Nearly all companies have experienced security incidents but few have an API security policy that includes dedicated API testing and protection. A defense-in-depth approach that includes boundary defense, observability, and authentication is recommended.

Ming Wen
on Nov 30, 2022
Development

Who Moved My Code? An Anatomy of Code Obfuscation

In this article, we introduce the topic of code obfuscation, with emphasis on string obfuscation. Obfuscation is an important practice to protect source code by making it unintelligible. Obfuscation is often mistaken with encryption, but they are different concepts. In the article we will present a number of techniques and approaches used to obfuscate data in a program.

Michael Haephrati Ruth Haephrati
on Nov 09, 2022
DevOps

Successfully Integrating Dynamic Security Testing into Your CI/CD Pipeline

Dynamic security testing tools don’t require advanced cybersecurity knowledge to operate. Integrating DAST into your CI/CD pipeline should be done in stages by focusing on the riskiest areas first.

Akira Brand
on Oct 21, 2022
DevOps

What Does Zero Trust Mean for Kubernetes?

Zero trust is a powerful security model that’s at the forefront of modern security practices. It’s also a term that is prone to buzz and hype, making it hard to cut through the noise. So what is zero trust, exactly, and for Kubernetes, what does it mean in concrete terms? In this article, we’ll explore what zero trust is from an engineering perspective.

William Morgan
on Aug 25, 2022