InfoQ Homepage Security Content on InfoQ

Articles

RSS Feed

Newer Older

DevOps

Article Series: Containers in the Real World - Stepping Off the Hype Curve

This article series explains how containers are actually being used within the enterprise. It dives into the core technology behind containers and how this is currently being used by developers, examines core challenges with deploying containers in the enterprise and the future of containerisation, and discusses the role unikernels are currently playing within leading-edge organisations.

Daniel Bryant
on Apr 17, 2016
Culture & Methods

Test Management Revisited

The concept of test management sits awkwardly in agile, mostly because it’s a construct derived from the time when testing was a post-development phase, performed by independent testing teams. Agile, with its focus on cross functional teams, has sounded the death knell for many test managers. While test management is largely irrelevant in agile, there is still a desperate need for test leadership.

Anne-Marie Charrett
on Apr 03, 2016
Cloud

Is HyperContainer the Answer for Cloud Native Applications?

Xu Wang introduces HyperContainer, a runtime for running Docker images on any hypervisor, providing hardware-enforced isolation for multi-tenant environments.

Xu Wang
on Mar 31, 2016
DevOps

Securing the Modern Software Delivery Lifecycle

Information security practice has evolved to be pretty good at granting and managing access to confidential information - by people. But automation is taking over, requiring a shift in how we think about securing our infrastructure and applications.

Dustin Collins
on Feb 27, 2016
DevOps

Sourcing Security Superheroes: Part II: How Policy Can Enhance, Rather Than Hinder, Breach Detection

In theory, security policies put standards in place to protect organizations, stakeholders, and users. But in practice, security policy often becomes a distraction, forcing organizations to focus on satisfying the demands of a governing body or an auditor, rather than addressing real threats.

Monzy Merza
on Feb 11, 2016
Mobile

A Reference Architecture for the Internet of Things

This is the first article of a two article series in which we try to work from the abstract level of IoT reference architectures towards the concrete architecture and implementation for selected use cases. This first article will cover the definition of a more concrete and comprehensible architecture whereas the second part will then apply this architecture to actual use cases.

Daniel Karzel Hannelore Marginean Tuan-Si Tran
on Jan 29, 2016
Culture & Methods

Towards an Agile Software Architecture

Boyan Mihaylov covers his experience when working with both traditional waterfall software architectures and agile ones. He depicts the similarities and differences between these with a focus on three areas: the specifics of the software architect role, the timespan of the software architecture, and the output of the software architecture.

Boyan Mihaylov
on Dec 28, 2015
DevOps

DevOps at Seamless: The Why, How, and What

The key thing about DevOps is understanding under which circumstances it should be introduced to your organization. Organizations that adopt DevOps go through a change that affects both processes and culture. This article focuses on why DevOps is needed, what concepts and values should support it, as well as how we implemented it at Seamless, what results we obtained and the challenges we faced.

Tomek Pająk
on Nov 29, 2015
Architecture & Design

The Mathematics of Adaptive Security

Enterprise security teams are charged with maintaining the “perfect” set of security policies. In their pursuit of the perfect security policy, they are often the department of slow (because the pursuit of perfection takes time). At the same time, “to err is human…”

Matthew Glenn
on Nov 01, 2015
Packet Inspection for Unauthorized OS Detection in Enterprises

The authors discuss an approach that uses TCP SYN packets for OS ﬁngerprinting to detect the presence of unauthorized OSs in an enterprise.

B. Thanudas Tuhin Paul B.S. Manoj Rohit Tyagi
on Oct 10, 2015
Version Control, Git, and your Enterprise

This article is about understanding Git – both its benefits and limits – and deciding if it’s right for your enterprise. It is intended to highlight some of the key advantages and disadvantages typically experienced by enterprises and presents the key questions to be contemplated by your enterprise in determining whether Git is right for you and what you need to consider in moving to Git.

Bob Jenkins
on Aug 18, 2015
Author Q&A on Leading without Authority

Tathagat Varma, shares his experience of working as an individual contributor at a deeper leadership level. He refers to this as an "Individual Leader". This post explains how to lead without authority.

Savita Pahuja
on Aug 16, 2015