InfoQ Homepage Security Content on InfoQ
-
How I Learned to Stop Worrying and Trust Crypto Again
Graham Steel discusses several cryptographic standards and examines the key management and cryptographic primitives offered by some of most widely encountered crypto APIs.
-
Reflections on Mistrusting Trust: How Policy & Technical People Use the T-word in Opposite Senses
Caspar Bowden discusses about duplicity, the impact of Snowden's revelations on the society and what can be done about trust today.
-
Risk Management is Project Management for Grown-Ups
Tim Lister presents the advantages—and the dangers—of practicing risk management in an adult-like fashion, offering a process for tailoring an organization and discussing how it can grow up.
-
Understanding & Managing Your Digital Footprint
Robin Wilton provides practical recommendations on how to understand and manage one's digital footprints.
-
Chrome Security
Parisa Tabriz presents current online threats and some of the ways Chrome protects users, along with Chrome's philosophies, successes, and ongoing challenges to doing security in a browser.
-
Plugging the Users in - Extend Your Application with Pluggable Groovy DSL
Baruch Sadogursky discusses creating DSLs which support plugins written both in Groovy or Java, addressing good public API design practices, security, and classpath isolation.
-
Application Security Pitfalls
Mike Wiesner advises on dealing with security tradeoffs when creating Servlet Container, Spring MVC or Spring Integration type of applications.
-
Case Study - Using Grails in the Real World
Greg Turnquist demoes using Spring Mail, Security, REST, GridFS, Bootstrap and jQuery in a production grade Grails application.
-
Uncle Sam's Guide to Grails Security
Joe Rinehart discusses some of the essential security topics for Grails/Java Web applications, showing how Grails can make life easier and the pitfalls of attempting to secure highly dynamic code.
-
My Other Internet is a Mirage
Anil Madhavapeddy suggests a different approach to building Internet services avoiding the complexity of today's services which incorporate many policies and security mechanisms.
-
One Backend Per User: 100% Data Privacy / 0 Scaling Issues
Michiel de Jong suggests solving the data privacy and scalability issues by enabling mobile apps to connect to user's preferred back-end using Dropbox.js, GDrive JS, NimbusBase, remoteStorage.io, etc.
-
API Security and Federation Patterns
The role of API management infrastructure in API Security, API Access Control and API Federation and its interaction with enterprise infrastructure, social identity and application developers.