InfoQ Homepage Security Content on InfoQ
-
Vulnerability Inbox Zero
Alex Smolen discusses dealing with security vulnerabilities both in the main product and the security scanner used to analyze it.
/presentations/analyze-vulnerabilities-scanner/en/mediumimage/alex-smolen-m-1670589517338.jpg)
-
Slack’s DNSSEC Rollout: Third Time’s the Outage
Rafael de Elvira Tellez discusses a case study of what happened when a large SaaS company enabled DNSSEC.
/presentations/slack-dnssec/en/mediumimage/qcon-plus-m-1667821196539.jpeg)
-
Securing APIs and Microservices in the Cloud
Stefania Chaplin discusses how to secure APIs and microservices in the cloud based on OWASP recommendations.
/presentations/owasp-secure-api-cloud/en/mediumimage/Stefania Chaplin-m-1667476193319.jpg)
-
Implementing Passwordless Logins with WebAuthn Protocol
Adib Saikali overviews the Web Authentication protocol which enables secure user-friendly authentication processes. He is using a sample Spring Security-based application.
/presentations/webauthn/en/mediumimage/Adib-Saikali-medium-1666879315923.jpg)
-
Perspectives on Trust in Security & Privacy
The panelists discuss balancing the adjustment of the security posture and the user experience.
/presentations/perspectives-trust-security-privacy/en/mediumimage/qcon-plus-m-1665739474830.jpeg)
-
Securing Java Applications in the Age of Log4Shell
Simon Maple looks at how one can be more proactive and defensive in decisions for future Log4Shell like scenarios, considering, identifying and reducing the risk introduced into applications.
/presentations/log4shell-security/en/mediumimage/Simon-maple-m-1665986617483.jpg)
-
"Trust Me, I'm an Insider" - Diving into Zero Trust Security
Sindhuja Rao and Deepank Dixit discuss how Zero Trust does a better security job, how scalable it is and why trust the “Zero Trust”.
/presentations/zero-trust-security/en/mediumimage/qcon-plus-m-1664526022932.jpeg)
-
Building Trust & Confidence with Security Chaos Engineering
Aaron Rinehart shares his experience on Security focused Chaos Engineering used to build trust and confidence, proactively identifying and navigating security unknowns.
/presentations/security-chaos-engineering-trust/en/mediumimage/Aaron Rinehart-m-1661501944686.jpg)
-
Protecting User Data via Extensions on Metadata Management Tooling
Alyssa Ransbury overviews the current state of metadata management tooling, and details how Square implemented security on its data.
/presentations/square-data-security/en/mediumimage/alyssa-ransbury-m-1661160125482.jpg)
-
DevSecOps Best Practices for Identity & Access Management
The panelists discuss how to integrate security into DevOps, where their concerns are and how each is addressed.
/presentations/devsecops-security/en/mediumimage/infoq-live-m-1657276640959.jpg)
-
Authorization at Netflix Scale
Travis Nelson discusses Netflix’s approach to scaling and shares techniques for distributed caching and isolating failure domains.
/presentations/authorization-scalability/en/mediumimage/travis_nelson-m-1657274616928.jpg)
-
Making Sense of Application Security
Adib Saikali provides a roadmap for application developers and architects to master application security, identifying the security skills needed as an application developer.
/presentations/app-security-skills/en/mediumimage/Adib Saikali-m-1656926310904.jpg)