InfoQ Homepage Security Content on InfoQ
-
Identity Is the New Currency
Paul Simmonds discusses the importance of identity and attribute information that will define how access to the functionality and how data is governed by applications in the near future.
-
Help, My Security Officer Is Allergic to DevOps
Frank Breedijk addresses security concerns raised in a DevOps environment that practices continuous deployment.
-
Application Security What You Don't Know Can Hurt You
Joe Kuemerle discusses some of the top threats that can break an app along with techniques to improve the design of an application to minimize vulnerabilities and mitigate what cannot be removed.
-
How I Learned to Stop Worrying and Trust Crypto Again
Graham Steel discusses several cryptographic standards and examines the key management and cryptographic primitives offered by some of most widely encountered crypto APIs.
-
Reflections on Mistrusting Trust: How Policy & Technical People Use the T-word in Opposite Senses
Caspar Bowden discusses about duplicity, the impact of Snowden's revelations on the society and what can be done about trust today.
-
Risk Management is Project Management for Grown-Ups
Tim Lister presents the advantages—and the dangers—of practicing risk management in an adult-like fashion, offering a process for tailoring an organization and discussing how it can grow up.
-
Understanding & Managing Your Digital Footprint
Robin Wilton provides practical recommendations on how to understand and manage one's digital footprints.
-
Chrome Security
Parisa Tabriz presents current online threats and some of the ways Chrome protects users, along with Chrome's philosophies, successes, and ongoing challenges to doing security in a browser.
-
Plugging the Users in - Extend Your Application with Pluggable Groovy DSL
Baruch Sadogursky discusses creating DSLs which support plugins written both in Groovy or Java, addressing good public API design practices, security, and classpath isolation.
-
Application Security Pitfalls
Mike Wiesner advises on dealing with security tradeoffs when creating Servlet Container, Spring MVC or Spring Integration type of applications.
-
Case Study - Using Grails in the Real World
Greg Turnquist demoes using Spring Mail, Security, REST, GridFS, Bootstrap and jQuery in a production grade Grails application.
-
Uncle Sam's Guide to Grails Security
Joe Rinehart discusses some of the essential security topics for Grails/Java Web applications, showing how Grails can make life easier and the pitfalls of attempting to secure highly dynamic code.