Understanding File Type Identifiers and Scanners
Dive into file type identification techniques and scanning mechanisms, exploring how different systems detect and process various file formats for enhanced digital forensics and security.
Creating Trampolines and Re-Obfuscating Function Pointers in Runtime Linking - Part 7
Delve into advanced runtime linking techniques, focusing on trampoline creation, function pointer resolution, and memory debugging in reverse engineering and malware analysis.
Способы Аутентификации в Kubernetes и Интеграция с LDAP
Discover comprehensive authentication methods in Kubernetes, from RBAC implementation to external directory service integration, focusing on Dex and Keycloak solutions for effective cluster access management.
С Какого Конца Начинать Безопасную Разработку - Инструменты и Подходы
Узнайте эффективные подходы к внедрению безопасной разработки, включая анализ инструментов сканирования уязвимостей и практические рекомендации по их интеграции в процесс разработки.
Как оградить себя от плохих зависимостей
Узнайте эффективные методы и инструменты для контроля и управления зависимостями в продуктах, защищая проекты от потенциально вредных компонентов.
Процесс безопасной разработки и как его внедрить без драк в переговорных
Discover effective strategies for implementing secure development processes in organizations, focusing on methodologies, automation, and conflict-free integration with existing workflows.
Мультикластерный масштабируемый Vault на тысячи сервисов
Discover how to scale HashiCorp Vault for thousands of services through custom auth backends, horizontal scaling, and integration with Cassandra, based on VK's infrastructure experience.
Автоматизация и Кастомизация Vault Community Edition - От Базового Хранилища к Многопользовательской Системе
Узнайте, как команда превратила Vault CE в автоматизированное многопользовательское хранилище с екретов с расширенными возможностями управления доступом и безопасностью.
Product Security Topologies - Применение Team Topologies для повышения безопасности
Discover how to boost product security using Team Topologies framework, with practical examples for resolving inter-team conflicts and enhancing security practices in Agile environments.
Управление TLS-сертификатами в инфраструктуре Kubernetes
Узнайте практические подходы к управлению TLS-сертификатами в Kubernetes, включая инструменты, безопасность и реальные кейсы от СберМаркет для эффективной работы с инфраструктурой.
Как Хранить и Управлять Сетевыми Политиками в Kubernetes
Discover practical approaches to organizing and managing network policies in Kubernetes clusters, from naming conventions to storage solutions and multi-cluster policy reuse strategies.
Network Policy для разработчиков: как, зачем и почему
Discover how to effectively implement Network Policy in Kubernetes, focusing on declarative approaches, GitOps methodology, and security best practices for microservices deployment.
Руководство по выращиванию политик безопасной разработки
Discover effective strategies for implementing secure development policies while maintaining developer productivity and organizational harmony, with practical guidance on incident prevention.
(Не)стандартный подход к моделированию Supply Chain Attack
Исследуйте методы защиты от Supply Chain атак через практические примеры моделирования угроз и эффективные стратегии предотвращения в сфере Operations Security.
Security для бедных без ущерба для DevEx
Discover practical approaches to implementing cost-effective security measures in remote-first companies while maintaining developer experience, from VPN alternatives to legacy system management.
Zero Trust Security Fundamentals for Storage Developers
Discover the essential principles of Zero Trust security methodology and its critical role in storage development, focusing on dynamic enforcement and comprehensive network protection.
Product Security Certifications: Understanding Requirements, Standards, and Implementation
Explore product security certifications, their importance in supply chain security, and key considerations for implementation, focusing on major certification options and compliance requirements.
Security Problems with Symbolic Links in UNIX File Systems
Delve into the security vulnerabilities of UNIX filesystem's symbolic links, exploring their design flaws, historical impact on system security, and modern Linux-based solutions for safer implementations.
Implementing HDFS ACLs in OneFS - A Guide to POSIX.1e Style Access Control Lists
Dive into POSIX.1e ACLs implementation in multiprotocol environments, exploring security model interactions, multithreading challenges, and practical translation methods between different ACL types.
Data Loss Mitigation Through 2-Factor Authentication - Ransomware Attack Prevention
Discover how to implement layered file system triggers and 2FA mechanisms to detect and mitigate ransomware attacks, focusing on data variance analysis and user access pattern recognition.
Fabric Notifications in Storage Networks: From Awareness to Action - 2022
Explore the latest advancements in Fabric Notifications technology for storage networks, focusing on implementation techniques, deployment solutions, and enhanced resiliency across Linux, AIX, and PowerPath systems.