Tag: security blog

Please vote (by way of comments) for the topic that is of interest to you.

1. Securing REST APIs/Micro Services
   1. Security vs Speed and Flexibility: A Conundrum
   2. Authentication
   3. Authorizations
   4. Input Validations & Output Encoding
   5. CSRF Defense
   6. Authorize Direct Object References
   7. Error handling/Information Disclosure
   8. API Gateway: Why you need it?
   9. CORS Demystified!
2. Amazon Web Services
   1. How do you know if your AMIs are secure?
3. Dynamic testing using a Proxy
   1. Burp
   2. Zap
4. OWASP (Open Web Application Security Project)
   1. Newest OWASP Top 10 Release Candidate List is Out
   2. OWASP Mobile Top 10: A Critique
5. DevSecOps: Shifting Security to the Left/Automating Security in DevOps Pipelines
   1. Static code analysis for security vulnerabilities
   2. Dynamic Application Security Testing (SAST) tools
   3. Interactive Application Security Testing (IAST) Tools
   4. Open Source Software (OSS) Vulnerability Scanning Tools
   5. Automated Security Test Cases
   6. Bamboo APIs – Love ’em
   7. Break Builds: Getting Devs to take action !
   8. Just In Time (JIT) Training
6. Setting up Security Assurance Program
   1. Security Architecture
   2. Security Assessments
   3. Vulnerability Management
   4. Security Training
7. Security Learning Resources
   1. Conferences
   2. Training
   3. Webinars/Webcasts
8. Miscellaneous
   1. Do you know what your attacks are?
9. Professional Success
   1. How to make effective presentations?  A Survival Guide for Techies