Security Resources

SOLID Principles: Dependency Inversion Principle

Here's a breezy walkthrough of the D in SOLID — dependency inversion. Read up on its core tenets and how to refactor code that breaks it.

May 4, 2018

by Emmanouil Gkatziouras

CORE

· 80,847 Views · 13 Likes

Elytron: A New Security Framework in WildFly/JBoss EAP

In this tutorial, we will create a self-signed certificate to understand how SSL/TLS works in Elytron. Read on to learn how to secure your JBoss EAP!

May 4, 2018

by Siddhartha De

· 7,342 Views · 3 Likes

Oracle WebLogic RCE Deserialization Vulnerability (CVE-2018-2628)

Oracle recently released its critical patch update (CPU) for the quarter. Read on to get a security experts view on the vulnerabilities included.

May 3, 2018

by Apostolos Giannakidis

CORE

· 12,735 Views · 2 Likes

Add Spring Security and Okta for a Secure Spring Microservices Architecture

This comprehensive guide will help you secure your microservices architectures using a combination of Spring Security and Okta.

May 2, 2018

by Matt Raible

· 9,674 Views · 2 Likes

CORS in .NET Core: .NET Core Security Part VI

A developer gives a tutorial on how to enable CORS in your .NET Core web application. Read on for some Rocky Mountain cold CORS app sec.

April 30, 2018

by Neel Bhatt

· 144,671 Views · 3 Likes

Providing users a easy and secure way to log in can do wonders for the security of your web service. Read on to see how to implement SSO.

April 25, 2018

by Sanjay Patel

CORE

· 46,179 Views · 10 Likes

Build Secure User Authentication in ASP.NET Core With OIDC and OAuth

Authentication is a core component of any high-quality web applications. In this post, we learn how to implement authentication in an ASP.NET Core app.

April 25, 2018

by Lee Brandt

· 29,270 Views · 2 Likes

Five Features of Information Security Every Cloud Platform Should Provide

A discussion of the five kinds of security and enterprise security management for cloud platforms that should be included in all cloud offerings.

April 24, 2018

by Doug Paris White

· 7,302 Views · 2 Likes

JWTs With Spring Boot and Java 9

Interested in using JWTs for your Java 9/Spring Boot projects? Learn how to set up your dependencies and the use cases for you to consider.

April 24, 2018

by Sergio Martin

· 33,726 Views · 24 Likes

Secure Tomcat Hosting: Restrict Access to Your Web Application

Locking down your web app is unavoidable. We take a look at how to restrict access to your Tomcat-based web app in this post.

April 23, 2018

by Tetiana Fydorenchyk

· 17,395 Views · 12 Likes

Stop Using JWTs as Session Tokens

Today I’m here to talk with you about the downsides of using JWTs. Specifically, why it’s a bad idea to use JWTs as session tokens for most people.

April 23, 2018

by Randall Degges

· 58,309 Views · 35 Likes

JDK 11 and Proxies in a World Past sun.misc.Unsafe

Java 11 is making changes to the Unsafe class. See what's being deprecated and how that's going to affect proxies for future projects.

April 22, 2018

by Rafael Winterhalter

· 34,930 Views · 21 Likes

Best SecOps Tools: 50 Must-Have Tools for Your SecOps Arsenal, Part 1

Looking for some great new tools to help you better understand where your software is vulnerable and to hunt out viruses? Read on for some great options.

April 21, 2018

by Christian Lappin

· 5,734 Views · 3 Likes

Adopting Secure SDLC Practice for Agile

The ability to shift security left in the SDLC and bake security into software from the beginning is more important than ever.

April 20, 2018

by Somesh Mohanty

· 5,438 Views · 1 Like

Mythbusters: Mobile Testing Edition

Let's bust some myths around mobile testing, like required skills, security, device labs, and PWAs to help you embrace mobile testing.

April 19, 2018

by Akshita DP

· 6,287 Views · 1 Like

Build a Secure To-Do App With Vue, ASP.NET Core, and Okta

This comprehensive post will help you create a simple, secure to-do application by combining the powers of Vue.js, ASP.NET Core, and Okta.

April 19, 2018

by Nate Barbettini

· 12,556 Views · 2 Likes

A Generic Logger Factory Facade for Classic ASP.NET

A web developer discusses when creating logger system for a web application makes sense, and how to do so in an ASP.NET-based web application.

April 18, 2018

by Juergen Gutsch

· 7,853 Views · 2 Likes

Chaos Tools and Techniques for Testing the TiDB Distributed NewSQL Database

When client's data is on the line, testing should be as robust and predictive as possible, which chao engineering can help with.

April 18, 2018

by Liu Tang

· 4,822 Views · 3 Likes

How to Use Multiple Certificates When Load Testing Secure Websites

Learn how to uses multiple security certificates from both the client side and the server side for load tests using keystores.

April 17, 2018

by Konsantine Firsanov

· 13,012 Views · 2 Likes

Build Secure User Management With Vue.js, Node, and Okta

You're probably no stranger to managing multiple JavaScript frameworks, so let's see how to use Vue and Node together to create a user management system.

April 16, 2018

by Brandon Parise

· 18,699 Views · 4 Likes

The Latest Security Topics