InfoQ Homepage Application Security Content on InfoQ

Articles

RSS Feed

Newer Older

Cloud

Managing Kubernetes Secrets with the External Secrets Operator

Kubernetes doesn’t yet have the capabilities to manage the lifecycle of secrets, so sometimes we need external systems to manage this sensitive information. Once the amount of secret information we need to manage increases, we may need additional tools to simplify and better manage the process. In this article, we’ll take a detailed look at one of these tools, the External Secrets Operator.

Önsel Akin
on Aug 02, 2022
Mobile

The Parity Problem: Ensuring Mobile Apps are Secure across Platforms

The problem of security parity is a big one, but it’s part of a larger problem: a general lack of security in mobile apps. By embracing automation for security implementation to the same or greater degree than it has been adopted for feature development, developers can ensure that every app they release for every platform will be protected from hackers, fraudsters, and cybercriminals.

Alan Bavosa
on Jul 07, 2022
DevOps

The Role of DevOps in Cloud Security Management

Different areas of cloud security must be examined to strengthen security in the cloud versus security of the cloud. This includes identifying requirements, defining the architecture, analyzing controls, and identifying gaps. Security must be both proactive and reactive, so it needs to be considered in every step of development.

Dotan Nahum
on Apr 22, 2022
DevOps

Strategies for Assessing and Prioritizing Security Risks Such as Log4j

The evolving threat landscape requires a comprehensive approach to mitigation. An effective strategy is built on visibility, assessing vulnerabilities in context, effective use of filtering technologies, and monitoring for evidence of intrusion.

Owen Garrett
on Mar 28, 2022
DevOps

Insights into the Emerging Prevalence of Software Vulnerabilities

The software exploit landscape is constantly evolving and organizations need to be structured to stay ahead of these risks. A solid platform built on software best practices, education, and a good understanding of the threat landscape is critical to a strong defensive posture.

Cynthia Freeney
on Mar 25, 2022
DevOps

Is Docker Secure Enough? Advice for Configuring Secure Container Images and Runtimes

Ensure that Docker is secure enough by fine-tuning the security approach to meet your use cases. It is important to have an understanding of the differences between the Docker image and the Docker runtime and the security implications and priorities for each. This article covers a number of techniques for ensuring appropriate security for Docker.

Rudy De Busscher
on Feb 23, 2022
DevOps

Failing Fast: the Impact of Bias When Speeding up Application Security

This article deals with three biases people can have with establishing application security while trying to move fast in building them, attitude which can cost the organization later, showing how to spot the biases, and providing advice on what to do about them.

Laura Bell
on Nov 08, 2021
DevOps

Application Security Manager: Developer or Security Officer?

The role of the Application Security Manager (ASM) should be the driving force of the overall code review process. An ASM should know about development processes, information security principles, and have solid technical skills. To get a good ASM you can either use experts from a service provider or grow an in-house professional from developers or security specialists.

Daniil Chernov
on Oct 20, 2021
DevOps

DevSecOps: the Key to Securing Your Supply Chain in a Multi-Cloud Threatscape

Recent supply chain attacks require businesses to re-evaluate their approach to DevOps, specifically as it relates to security. The DevSecOps focus CI/CD platforms, testing and scanning across the SDLC, and a focus on minimizing manual efforts can not only improve security postures but also improve delivery of business value.

Johnathan Hunt
on Jul 22, 2021
Culture & Methods

How Teams Can Overcome the Security Challenges of Agile Web App Development

Is the rapid pace of continuous rollouts making it too easy for your organization to cut corners when it comes to ensuring product source code is secure? You may need to reorient your team culture to adopt agile-friendly security processes. True collaboration between security and dev teams is the key to avoiding product vulnerabilities without compromising on your sprint cadence.

Asim Rahal
on Jan 16, 2021
Architecture & Design

Application Level Encryption for Software Architects

Challenges of building application-level encryption for software architects.

Eugene Pilyankevich
on Dec 18, 2020
Culture & Methods

Q&A on the Book Cybersecurity Threats, Malware Trends and Strategies

The book Cybersecurity Threats, Malware Trends and Strategies by Tim Rains provides an overview of the threat landscape over a twenty year period. It provides insights and solutions that can be used to develop an effective cybersecurity strategy and improve vulnerability management.

Ben Linders Tim Rains
on Dec 07, 2020