InfoQ Homepage PCI DSS Content on InfoQ
Articles
RSS Feed-
/articles/cloud-security-at-scale/en/smallimage/logo.jpg)
A Pragmatic Approach to Scaling Security in the Cloud
Security. Cloud. Two words that are almost always together but rarely happily. Read on to learn why that isn’t the case and what you need to known about securing your critical infrastructure in the cloud.
-
/articles/managing-security-requirements-in-agile-projects/en/smallimage/logo.jpg)
Managing Security Requirements in Agile Projects
Managing security requirements from early phases of software development is critical. Most security requirements fall under the scope of Non-Functional Requirements (NFRs). In this article, author Rohit Sethi discusses how to map NFRs to feature-driven user stories and also how to make security requirements more visible to the stakeholders.
-
/articles/regulatory-compliant-cloud-computing/en/smallimage/article icon.jpg)
Regulatory Compliant Cloud Computing: Rethinking web application architectures for the cloud
Not all data is sensitive and hence an equal and balanced investment in securing all data categories is not justified. This article presents an architecture that leverages cloud-computing, cloud-storage and enterprise key-management Infrastructure(EKMI) to lower costs while complying to data-security regulations.
-
/articles/cloud-security-architecture-intro/en/smallimage/art icon.jpg)
Introduction to Cloud Security Architecture from a Cloud Consumer's Perspective
Security concerns are the number one barrier to cloud services adoption. How do we evaluate a vendor's solution? What is an optimal security architecture? What are consumer versus provider responsibilities? What are industry standard patterns in this regard? This article answers some of these questions based on first hand experience dealing with large scale cloud adoption.
-
/articles/Virtual-Panel-Cloud-Computing/en/smallimage/image_cloud.jpg)
Virtual Panel on Cloud Computing
In this virtual panel, InfoQ wants to find out from leading cloud experts what are the benefits brought by cloud computing as well as the constraints in using them, what is better to use, a public or a private cloud, is the cloud interoperability needed, what is the difference between providing infrastructure or a platform, and how can a client enforce regulatory compliance.