InfoQ Homepage Security Content on InfoQ
-
Advanced Threat Modeling
John Steven talks about modeling security threats as a way to secure a system while designing its architecture. John focuses on authentication, authorization and session management.
-
Secure Programming with Static Analysis
Creating secure code requires more than just good intentions. Static source code analysis can be used to uncover the kinds of errors that lead directly to vulnerabilities. Brian Chess shows you how.
-
Operational Scalability in the Next Generation Web World
Wayne Fenton, Director of Architecture at eBay Inc., talks about the ways in which software architects can design systems for much-improved efficiency and reliability from an operational perspective.
-
Security (CAS and OpenID) with Ruby
In this talk from QCon SF 2007, Justin Gehtland explains two open solutions to distributed identity and their Rails integration components: OpenID (using ruby-openid) and CAS (using rubycas-client).
-
Patterns for securing architectures
Security is about trade-offs. Only a few have the expertise to design good security. This talk focuses on Security Patterns, such as Role-based Access Control, Single Access Point, and Front Door.
-
SOA Masterclass: Definitions & Patterns
Miko Matsumura teaches SOA Foundations: Definitions, Patterns, and evolution toward SOA. An excerpt from webMethods SOA Master Class.
-
Security Assertion Markup Language - SAML
The Security Assertion Markup Language has emerged as the gold standard for building Cross-Domain SSO solutions and is a key technology in the domain of federated identity management.