BT

Facilitating the Spread of Knowledge and Innovation in Professional Software Development

Write for InfoQ

Register Sign in

Unlock the full InfoQ experience

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources.

Log In

or

Don't have an InfoQ account?

Stay updated on topics and peers that matter to youReceive instant alerts on the latest insights and trends.
Quickly access free resources for continuous learningMinibooks, videos with transcripts, and training materials.
Save articles and read at anytimeBookmark articles to read whenever youre ready.

Logo - Back to homepage

News Articles Presentations Podcasts Guides

Topics

Development

Featured in Development

Accelerating Performance by Incrementally Integrating Rust into Existing Codebase

Lily Mara explains how to avoid high-risk software rewrites through incremental FFI refactoring. She shares how engineering teams can replace Python bottlenecks with Rust via PyO3, demonstrating how to achieve dramatic function-level speedups, seamless integration testing, and meaningful infrastructure cost savings without microservice overhead.

All in development

Architecture & Design

Featured in Architecture & Design

Beyond Relevance: A Governance-First Architecture for Enterprise Personalization

This article examines the limitations of conventional personalization systems and highlights the need for a governance-first architecture. It emphasizes separating relevance from governance to ensure recommendations are context-aware, auditable, and compliant. The architecture integrates stateful memory, policy-driven AI orchestration, and explainable scoring to enhance personalization systems.

All in architecture-design

AI Infrastructure

Featured in AI, ML & Data Engineering

The Agent Harness: Control Planes, Invariants, and Approval Boundaries for Production AI Agents

OpenAI’s Vinoth Govindarajan discusses why production AI agents fail beyond model hallucination. Using real-world case studies like OpenClaw, he explains the key principles of reliable agent harnesses: establishing explicit state ownership, serializing concurrent state mutations, scoping execution authority, and validating actions at the user-visible edge.

All in ai-ml-data-eng

Culture & Methods

Featured in Culture & Methods

Complexity and Creativity in Software Engineering

Phillip Mortimer discusses the shift toward write-only software driven by AI code generation. He explains why traditional pull requests are broken and shares how engineering leaders can manage complexity by decoupling intent from implementation, automating code reviews, and building self-healing architecture to unleash developer creativity across senior engineering and architecture teams.

All in culture-methods

DevOps

Featured in DevOps

Securing AI Agents: Identity, Authorization, and the DPACT Framework

In this episode, Sahil Agarwal talks about the critical challenges of identity, authorisation, and security in the age of AI agents. Sahil introduces the DPACT framework (Delegation, Policy, Auditability, Context, and Time) as a blueprint for building responsible, guardrailed agentic systems, moving away from simple token-based access toward bounded, delegated authority.

All in devops

Events

Helpful links

Choose your language

Architect Certification

Distributed systems, decentralized decisions, platform engineering, and AI architecture.
Online. Register Now.

AI Security & Privacy Engineering Certification

Secure and govern production AI systems, from sensitive data to guardrails, evals, and audits.
Online. Register now.

AI-Assisted Engineering Certification

Your coding agent moves fast. Who checks whether it's making the codebase better?
Online. Register Now.

QCon San Francisco

What's working across AI, architecture, and leadership, from the teams doing it.
Register. Early bird ends Oct 13.

QCon AI New York

Production AI across agents, context, evals, security, and infrastructure, from the senior engineers building it.
Register. Early bird ends Oct 13.

QCon London

What early-adopter teams have proven in production, across 15 engineering tracks.
Register. Early bird ends Oct 13.

InfoQ Homepage Interviews Future of Web Application Security, with Tyler Close

Future of Web Application Security, with Tyler Close

Download

19:53

Bio

Tyler Close works on Web Application security at Google, after spending 5 years at Hewlett-Packard Labs as a security researcher. Much of his work focuses on finding easier ways to implement and use applications that have useful security properties. He has published papers at the Financial Cryptography conference, WWW conference, NDSS, BlackHat, and others.

About the conference

QCon is a conference that is organized by the community, for the community.The result is a high quality conference experience where a tremendous amount of attention and investment has gone into having the best content on the most important topics presented by the leaders in our community.QCon is designed with the technical depth and enterprise focus of interest to technical team leads, architects, and project managers.

Mar 08, 2011

Interview with

Tyler Close

by

Dio Synodinos

BT