The Security Evolution of gRPC Services in the Mesh
Explore the evolution of securing gRPC services in containers and service mesh, focusing on Istio's role in enhancing security posture for east-west traffic without sidecar complexity.
Securing Amazon REST APIs Using Auth0
Learn to build and secure REST APIs using Amazon API Gateway and Auth0. Explore JWT-based authorization, integration with external identity providers, and best practices for API security in this hands-on webinar.
Rapid Assessment of Service and Application Security - Application Design and Architecture
Learn a rapid methodology to assess application security, identify vulnerabilities, and improve overall security posture. Gain practical skills to evaluate design and architecture, even with limited resources.
Secure Your Microservices with Spring Security and OAuth
Learn to create a secure microservices architecture using Spring Boot 2.0, Spring Security, and OAuth 2.0 in this practical screencast.
Protecting Routes and Securing API Endpoints in Node.js and Express - Part 3
Expand Node.js/Express app with protected routes and secure API endpoints. Learn to implement authentication, create private pages, and build a secured API for web application integration.
Self Service OAuth with Okta and Terraform
Learn to automate OAuth application setup using Okta and Terraform. This tutorial covers code implementation, module declaration, resource creation, and testing for a self-service authorization experience.
Better Testing with Spring Security Test
Learn to configure and mock Spring Security tests for OpenID Connect, JWT authentication, and OAuth 2.0 authorization with opaque tokens in this comprehensive screencast.
Alexa Account Linking with Okta - Developer Tutorial
Learn to integrate Alexa with Okta for secure account linking, enhancing user authentication in voice-controlled applications and exploring developer tools.
Cloud Native Security Landscape - Key Areas and Strategies
Explore key areas of Cloud Native security: platform protection, user management, and software supply chain. Gain insights into securing control planes, managing access, and mitigating threats in the cloud landscape.
gRPC Security with Less Effort - NSEC2023
Explore gRPC security vulnerabilities, attack vectors, and best practices. Learn to implement secure configurations and leverage Kubernetes for robust authentication and authorization in gRPC services.
Spotify Plugins for Backstage: Commercial and Open Source Software Integration - GOTO 2023
Explore how Spotify's Backstage platform combines open-source and commercial plugins, focusing on the RBAC plugin as an example of harmonious ecosystem development and mutual benefit.
Spring Security Architecture Principles - 2024
Explore Spring Security's core architecture, building blocks, and customization techniques through diagrams and live coding. Gain practical insights for implementing robust security in your applications.
OAuth, OpenID Connect and .NET - The Good Parts
Explore OAuth and OpenID Connect essentials for .NET developers, focusing on key protocol flows, extensions, and recommended practices for implementing token-based security in modern applications.
OAuth Secret: Advanced Exploitation Techniques - NahamCon 2024
Explore advanced OAuth exploitation techniques beyond simple redirect_uri attacks. Learn to chain multiple vulnerabilities for successful account takeovers in modern web applications.
OAuth 2.0 - It's the Implementation, Stupid
Explore OAuth 2.0 implementation, covering key concepts, grant types, and security considerations for robust authentication and authorization in web applications.
Kubernetes Authentication and RBAC for CKS Certification
Master Kubernetes authentication and RBAC implementation through hands-on guidance in certificate-based user creation, service accounts configuration, and role-based access control for enhanced cluster security.
Demystifying Ironic's Access Control Model - Understanding Roles and Capabilities
Discover how to implement role-based access control in Ironic, from basic admin rights to granular machine-level permissions, enhancing your bare metal operations security and management capabilities.
Fine-Grained Authorization with Relationship Based Access Control
Explore fine-grained authorization through relationship-based access control (ReBAC), offering practical solutions for complex permission scenarios beyond traditional role-based systems.
SIG Auth Deep Dive - Current Projects and Future Directions
Deep dive into Kubernetes SIG Auth's current projects, including Pod Security, KMS encryption enhancements, authentication configuration, and certificate signing request controls.
One API to Rule Them All - Gateway API and Service Meshes
Explore the impact of Kubernetes Gateway API on service mesh unification, addressing API sprawl and feature fragmentation in cloud-native environments for improved user experience and tooling integration.
Manage Your Permissions System Like Google Does
Explore modern authorization solutions, policy engines, and Google Zanzibar to address scalability and latency challenges in large-scale permission systems.