InfoQ Homepage Security Content on InfoQ
-
Crafting an Effective Security Organization
Rich Smith discusses the progressive approaches taken by the Etsy security team to provide security while not destroying the freedoms of the Etsy engineering culture that are loved so much.
-
Real Threat and Real Defenses – Case Study of the Unknown
Alex Holden examines hackers’ techniques, skills, and shortfalls. He takes a snapshot of the current threat landscape and derives practical lessons by analyzing a number of high profile breaches.
-
Operating Microservices
Michael Brunton-Spall shows how DevOps-like patterns can be applied on microservices to give the development teams more responsibility for their choices, and much more.
-
Designing Secure Services with Unikernels: a Tough Nut to Crack
Anil Madhavapeddy describes how to design and build "deploy-and-forget" cloud services that are specialized into unikernels, single-address space virtual machines.
-
Practical Insights when Designing an API from Scratch
Paul Glavich discusses design decisions to be made when building a new API regarding versioning, hypermedia usage, authentication and other aspects.
-
Mini-talks: Machine Intelligence, Algorithms for Anti-Money Laundering, Blockchain
Mini-talks: The Machine Intelligence Landscape: A Venture Capital Perspective. The future of global, trustless transactions on the largest graph: blockchain. Algorithms for Anti-Money Laundering
-
Hack Your API First
Troy Hunt explain how to discover the vulnerabilities of one’s own APIs, identifying common security anti-patterns.
-
Your Thing is Pwnd: Security Challenges for the Internet of Things
Paul Fremantle explores the challenges of security for IoT, including reviewing some existing attacks and predicting others, hardware, software, network and cloud attacks.
-
Welcome to the Internet of Things, By the Way Privacy Is Dead
Kate Carruthers overviews some of the privacy challenges and security issues introduced by the Internet of Things.
-
Understanding Cloud, Big Data, Mobile and Security – Do They Play Nicely Together?
Colin Mower discusses the challenges met using together Cloud, Big Data, Mobile and Security and how these can work together to achieve business value.
-
The Five Elements of IoT Security, Open Source to the Rescue!
Julien Vermillard discusses challenges in IoT security regarding hardware, upgrade, transport, credentials, and cloud.
-
Release Testing Is Risk Management Theatre
Steve Smith discusses why Release Testing is an anti-pattern, and offers an alternative risk reduction strategy.