Exploring the Latest Open-Source Python API for Oracle Database Applications
Discover Oracle's latest Python module for database applications, featuring a "thin" mode for easier configuration and efficient runtime, plus best practices for installation and upgrading.
Cryptography Demystified
Einführung in die Grundlagen der Kryptographie ohne mathematische Vorkenntnisse. Erklärt Verschlüsselung, Authentifizierung, Zertifikate und sichere Verbindungen für ein breites Publikum.
Adventures in Authentication and Authorization
Explore Netflix's journey in implementing authentication and authorization for microservices, discussing technology choices, challenges, and innovative solutions for a robust zero-trust ecosystem.
Enter the Matrix - Install Your Own Matrix Server on Arch Linux - Arch Conf 2020
Learn to install and configure your own Matrix server on Arch Linux, joining a federated network for secure, decentralized real-time communication. Explore Synapse setup, ecosystem, and key features.
Inside "MOAR TLS" - How We Think about Encouraging External - Emily Schechter - USENIX Enigma Conference - 2017
Exploring Google's "MOAR TLS" project to promote HTTPS adoption, addressing challenges, sharing strategies, and discussing the future of web security.
PKI at Scale Using Short-Lived Certificates - USENIX Enigma 2016
Explore PKI deployment challenges at scale, focusing on short-lived certificates for cloud microservices. Learn about operational hurdles, scaling certificate authorities, and maintaining instance trustworthiness.
Micro-services Challenges - Istio to the Rescue
Explore Istio's solutions for micro-services challenges, including traffic management, policy enforcement, and security, to enhance scalability and operational efficiency.
New Age Cloud Security - How to Build Secure Multi-Cloud Applications and Still Sleep Well
Learn to build secure multi-cloud applications with modern techniques. Explore industry trends, development phases, and essential components like TLS, DNS, user management, and data encryption for robust cloud security.
Preventing Mobile App and API Abuse
Explore mobile app and API security threats, countermeasures, and defense-in-depth techniques through a courier service's evolving security approach against malicious attacks.
A Tour of API Underprotection
Explore API security threats, protection techniques, and advanced strategies. Learn about OAuth2, static API keys, mobile security, certificate pinning, and emerging technologies to strengthen your API security posture.
On the Practical - In-Security of 64-bit Block Ciphers - Collision Attacks on HTTP over TLS and OpenVPN
Explore practical security vulnerabilities in 64-bit block ciphers, focusing on collision attacks in HTTP over TLS and OpenVPN. Learn about countermeasures and implications for network security.
Ask the Experts - Azure Networking
Interact with Azure Networking experts to learn about latest announcements, ask questions, and provide feedback on topics like load balancing, routing, and connectivity options.
Securing Your Containerized Applications with NGINX
Explore NGINX's role in securing containerized apps as a sidecar reverse proxy, covering TLS, HTTP, authentication, authorization, and traffic control.
OAuth 2.1 and Beyond
Explore modern OAuth techniques for enhanced security, including strong client authentication, proof-of-possession tokens, and hardened authorization requests.
An Extensive Formal Security Analysis of the OpenID Financial Grade API
Comprehensive formal security analysis of OpenID Financial-grade API, uncovering vulnerabilities and proposing mitigations for this high-stakes OAuth 2.0 profile designed for Open Banking scenarios.
Achieving Mutual TLS - Secure Pod-to-Pod Communication Without the Hassle
Explore secure pod-to-pod communication using Mutual TLS, focusing on certificate management, implementation in Golang and Java applications, and integration with Kubernetes for streamlined security.
Mallet - Towards a Generic Intercepting Proxy
Explore Mallet, a new open-source intercepting proxy with a user-friendly interface, high performance, and extensive protocol support. Learn its advantages over existing tools and potential applications.
In Search of CurveSwap - Measuring Elliptic Curve Implementations in the Wild
Comprehensive survey of elliptic curve implementations in TLS, SSH, and IPsec protocols, analyzing support and behaviors across internet-wide scans and passive measurements.
Understanding and Managing Entropy Usage
Explore cryptographic entropy usage, sources, and management across systems. Learn to analyze and improve random number generation for enhanced security in modern IT infrastructures.
Service Identity - The Key to Zero Trust with Service Mesh
Explore service identity in Zero Trust security with service mesh, covering SPIFFE, mTLS, and enterprise PKI integration for enhanced workload protection and seamless communication.
Compliance the Easy Way - Zero-conf mTLS for Dev and Smooth Day-2 for Ops
Explore zero-conf mTLS implementation with Linkerd for secure, observable, and reliable application infrastructure in financial contexts, including insights on integration and long-term operations.