Apiserver Builder: Extending Kubernetes via Aggregated Apiserver
探索通过聚合 Apiserver 扩展 Kubernetes 的实用方法。介绍 apiserver-builder 工具,对比 CRD 和 AA 的优缺点,并分享构建自定义聚合 apiserver 的实践经验。
Kubernetes Multi-Cluster and Multi-Tenancy With RBAC and KubeFed
Explore multi-cluster Kubernetes management, focusing on soft multi-tenancy, RBAC, and KubeFed. Learn best practices for authentication, resource quotas, and isolation across multiple clusters.
Multi-Tenant Management in HP OneCloud Platform
惠普OneCloud平台利用Istio实现多租户管理,包括API速率限制、认证授权、可观察性增强和成本计算,为数百个项目提供支持。
Secure Programming Techniques - UbuConLA 2017
Aprenda técnicas y mejores prácticas para desarrollar software más seguro y resistente a vulnerabilidades, protegiendo sus aplicaciones de amenazas cibernéticas.
Django 3 Blog: Authentication and Authorization Tutorial - Part 85
Aprenda a implementar autenticação e autorização em um blog Django 3. Tutorial em hindi sobre gerenciamento de usuários e permissões em aplicações web Python.
From Zero to Zero-Trust: Building a BeyondCorp SSH Proxy - Lessons Learned
Learn to build a BeyondCorp-inspired SSH proxy for secure access to internal resources without VPNs. Explore implementation details, challenges, and benefits of this zero-trust approach to network security.
API Security Best Practices and Guidelines - 2016
Explore industry-leading best practices for designing secure APIs, navigating standards, and protecting both public and private APIs to maximize benefits while keeping threats at bay.
Learn AAA From Scratch - TACACS+ vs RADIUS and Kerberos
Comprehensive guide to AAA authentication, covering TACACS+, RADIUS, and Kerberos protocols. Learn configuration, implementation, and key differences between these security mechanisms.
Lessons in Securing Internal Apps - AppSecCali 2019
Lessons and strategies for securing internal applications, including authentication, TLS, Content Security Policy, and leveraging WAFs. Insights on scalable approaches and using internal apps to train security engineers.
Don't Worry, Be API - Addressing AppSec's Modern Challenge
Explore modern API security challenges and solutions, including OWASP API Security Top 10, authentication issues, and authorization vulnerabilities in this comprehensive overview.
API Authentication's Poorly Implemented - Security Issues in Web APIs
Explore real-world API security issues, focusing on authentication and authorization problems across various platforms. Learn from examples ranging from online payment systems to embedded device infrastructures.
Shift-Left DevOps for APIs with Okta and JFrog - Developer Day 2021
Strengthen your shift-left DevSecOps strategy by automating REST API security validation using Okta and JFrog. Learn to verify authentication and authorization policies before production release.
Building an Inherently Secure App - Challenges and Best Practices
Explore API-driven app security with Pangea's "Security Platform as a Service," integrating Auth0 by Okta for authorization. Learn to build inherently secure cloud apps across multiple platforms.
Building Beyond the Login Box - Developing Flexible and Scalable Authentication
Explore advanced authentication beyond login boxes, including passkeys, flexible features, and authorization. Learn how Okta's CIC enhances developer productivity for future challenges.
A Practical Approach to Applying Access Controls
Learn practical techniques for implementing effective access controls in cybersecurity systems, enhancing your ability to protect sensitive information and manage user permissions.
Building an Identity Platform Using Okta for Healthcare Applications
Explore building a secure, compliant identity platform for healthcare apps using Okta. Learn to create abstractions, SDKs, and React hooks for improved developer experience and standardized identity management.
Securing Digital Frontiers: Leveraging Keycloak for Comprehensive Application Security
Explore Red Hat's Keycloak for robust identity and access management in diverse deployment environments, ensuring application security and mitigating financial risks.
Safeguarding Web Applications Against Token Theft - Fortifying Security with DPoP
Explore DPoP, an innovative approach to secure token management in web applications, enhancing OAuth 2.0 framework and addressing challenges in authentication and authorization.
Zero Trust Security with Boundary and Vault
Explore zero trust security implementation using HashiCorp Boundary and Vault for secure, scalable access to cloud resources without VPNs or static credentials.
A New Architecture for Data Security to Free Incident Responders from False Positives
Explore a new data security architecture that minimizes false positives, enhancing incident response efficiency and improving detection of real security threats.
Identity and Security Meetup - November 2023
Explore OAuth 2.0 security in frontends and gain insights from identity experts. Level up your skills with presentations on web security and identity management from industry professionals.