InfoQ Homepage Cloud Security Content on InfoQ

Articles

RSS Feed

Newer Older

Cloud

Serverless Security: What's Left to Protect?

This article aims to provide a broad understanding of security in the Serverless world. We'll consider the ways in which Serverless improves security, the areas where it changes security, and the security concerns it hurts.

Guy Podjarny
on Feb 23, 2018
Mobile

A Roadmap to the Programmable World

The emergence of millions of remotely programmable devices in our surroundings will pose significant challenges for software developers. This article proposes a roadmap from today’s cloud-centric, data-centric Internet of Things systems to the Programmable World highlights those challenges that haven’t received enough attention yet.

Antero Taivalsaari Tommi Mikkonen
on May 27, 2017
Cloud

Taking an Application-Oriented Approach to Cloud Adoption

Taking an infrastructure-centric approach to cloud adoption can lead to unrealized benefits. Architect Amit Kumar outlines eleven principles to consider when introducing cloud services into your architecture.

Amit Kumar
on May 09, 2017
Cloud

A Security Approach for a Cloudy World: An Interview with Pete Cheslock

Does your approach to application and data center security change when adopting cloud services? To learn more about this topic, InfoQ reached out to Pete Cheslock, head of operations and support teams at Threat Stack.

Richard Seroter
on Mar 17, 2017
DevOps

Respect Your Organisational Monoliths

There is a lot of information about DevOps, the technology, the culture, the behaviour. There is not a lot of information about tackling DevOps in large enterprises and there is certainly very little about tackling DevOps in large financial organisations. This article presents lessons learnt rolling out DevOps in a large insurance organisation.

Margo Cronin
on Aug 18, 2016
Culture & Methods

Towards an Agile Software Architecture

Boyan Mihaylov covers his experience when working with both traditional waterfall software architectures and agile ones. He depicts the similarities and differences between these with a focus on three areas: the specifics of the software architect role, the timespan of the software architecture, and the output of the software architecture.

Boyan Mihaylov
on Dec 28, 2015
Hologram - Finally, AWS Key Distribution that Makes Sense

Faced with the lack of solutions for secure distribution of AWS access keys to developers, AdRoll decided to build their own open source Hologram, a system that brings Amazon's Instance Profile mechanism to developer workstations. Adair details the process, tool design and main features.

Arian Adair
on Mar 31, 2015
Cloud Security Auditing: Challenges and Emerging Approaches

Security audits are an important part of IT security programs. In this article, authors highlight the challenges in cloud computing business models, based on interviews with cloud security auditors. They talk about the challenges in the areas of transparency, encryption and colocation and domain-tailored audits as ideal solution in the new model.

William Aiken Syed Rizvi Jungwoo Ryoo John Kissell
on Mar 08, 2015
A Pragmatic Approach to Scaling Security in the Cloud

Security. Cloud. Two words that are almost always together but rarely happily. Read on to learn why that isn’t the case and what you need to known about securing your critical infrastructure in the cloud.

Mark Nunnikhoven
on Jun 06, 2014
Securing Servers in the Cloud: An Interview With Trend Micro

What’s the best way to protect servers in the cloud? How can you account for the transient nature of cloud servers and provide the same protection in the cloud as on on-premises? To find out, InfoQ spoke with Mark Nunnikhoven, a Principal Engineer in the Cloud & Emerging Technologies division at Trend Micro. You can find Mark on Twitter as @marknca.

Richard Seroter
on Nov 13, 2013
Automating Data Protection Across the Enterprise

This article builds on the foundational Regulatory Compliant Cloud Computing (RC3) architecture for application security in the cloud by defining a Data Encryption Infrastructure(DEI) which is not application specific. DEI encompasses technology components and an application architecture that governs the protection of sensitive data within an enterprise.

Arshad Noor
on Feb 07, 2013
Don't SCIM over your Data Model

This opinion piece discusses three specific suggestions for improving the SCIM data model: 1. Both the enterprise client and cloud provider should map their internal IDs to a shared External ID, which is the only ID exposed through the API. 2. Multi-valued attributes of a resource must be converted from an array into a dictionary with unique keys. 3. 3 ways to improve the PATCH command

Ganesh Prasad
on Aug 08, 2012

Newer Articles

Older Articles

InfoQ Software Architects' Newsletter

Login with:

Don't have an InfoQ account?

Articles