InfoQ Homepage Application Security Content on InfoQ
-
Security for Microservices with Spring and OAuth2
David Syer explores the new features in Spring OAuth2, providing guidance on what to use and when, and showing how easy they are to enable quickly.
-
Building Connected Android Apps with Azure
Chris Risner demos an Android app built with Azure Mobile Services using structured data stored in the cloud, GCM push notifications with a single line of code, authentication, security and others.
-
Application Security What You Don't Know Can Hurt You
Joe Kuemerle discusses some of the top threats that can break an app along with techniques to improve the design of an application to minimize vulnerabilities and mitigate what cannot be removed.
-
Uncle Sam's Guide to Grails Security
Joe Rinehart discusses some of the essential security topics for Grails/Java Web applications, showing how Grails can make life easier and the pitfalls of attempting to secure highly dynamic code.
-
One Backend Per User: 100% Data Privacy / 0 Scaling Issues
Michiel de Jong suggests solving the data privacy and scalability issues by enabling mobile apps to connect to user's preferred back-end using Dropbox.js, GDrive JS, NimbusBase, remoteStorage.io, etc.
-
Securing Grails Applications
Burt Beckwith discusses the security risks web applications may face (XSS, CRSF, SQL injection) and the libraries and plugins that developers can use to secure their Grails applications.
-
Protecting Mobile Apps and Security around Bring Your Own Device
Alex Batlin and Shane Williams explore the challenges faced maintaining the security of mobile apps and also take a look at the enterprise implications with the push for BYOD.
-
Eval Begone!: Semi-Automated Removal of Eval from JavaScript Programs
Gregor Richards introduces Evalorizer, a heuristics based tool which is meant to replace JavaScript eval constructs with safer JavaScript correspondents.