A high-level security blueprint for modern apps based on APIs and microservices - part 1COMBINE EXISTING SECURITY CONCEPTS AND BEST PRACTICES TO BUILD MORE SECURE DISTRIBUTED APPLICATIONSOriginally …
Securing modern API- and microservices-based apps by design
Security is a lifestyle choice, not a certification.I saw an interesting post on twitter about how often people trying to get into security have one or two certifications but no context. The example …
Continue Reading about Securing modern API- and microservices-based apps by design →
Securing modern API- and microservices-based apps by design – part 2
Authorization across microservices, AuthN and AuthZ protocols, and advanced security policiesOriginally posted by Farshad Abasi of Forward Security on the IBM Developer blog on May 31st.Part 1 of this …
Continue Reading about Securing modern API- and microservices-based apps by design – part 2 →
ISO 27001 Or SOC 2? How To Decide Which Audit To Pursue First
This post was originally published on the StandardFusion blog. Many organizations have chosen to focus their strategy towards compliance with data security best practices. The benefits are obvious: …
Continue Reading about ISO 27001 Or SOC 2? How To Decide Which Audit To Pursue First →
Where To Start On Your Security Journey – For SMB
The most important thing is to start. Where you start matters less, but starting matters. If you delay you are just increasing the risk of something bad happening. Here’s some stages to consider in …
Continue Reading about Where To Start On Your Security Journey – For SMB →
Reduce Your Exposed Surface Area With Split Horizon DNS
One of the findings we commonly have when running our External Discovery service is that DNS administrators have accidentally or unwittingly exposed internal services to external audiences. Often, to …
Continue Reading about Reduce Your Exposed Surface Area With Split Horizon DNS →
