AppSec Essentials Development teams need to deliver quality software on time and within budget. Successful teams establish goals at the beginning of each project, and they communicate...
Read Article
What is modern application development? That may sound like an impossible question to answer. Not only is “modern” a relative and subjective term, but there are so many different approaches to...
Read Article
Since all software may be vulnerable to attack, lists of software risks can be found at organizations like OWASP, SANS, and others. These groups, and the lists they create, help the...
Read Article
Any organization with aspirations to do business with the U.S. Department of Defense will rapidly familiarize itself with the recently introduced Cybersecurity Maturity Model Certification...
Read Article
With the mass adoption of open source software in recent years, there has been an increasing tendency to include it as dependencies. This means that software systems use open source components...
Read Article
According to its official documentation, “FileBrowser” is an open source file managing interface within a specified directory that can be used to upload, delete, preview, rename, and edit your...
Read Article
There are a variety of excellent reasons to use containers. They’re more agile and consume fewer resources than virtual machines. They provide more flexibility and security than running...
Read Article
We’re living in an open source world. If you’re a developer today, it’s very likely that – no matter where you work or what type of applications you build – you rely at least in part on open...
Read Article
Infrastructure-as-Code (IaC) tools are exemplary software solutions that Developers and DevOps teams use to describe common infrastructure components like servers, VPCs, IP addresses or VMs in a...
Read Article
Heeding the security advice of leading community groups – like the Open Web Application Security Project (OWASP) – is a best practice for developers. But so is original, creative thinking about...
Read Article
State and local governments are accelerating their use of the cloud as they focus on delivering more digital services with fewer resources and continue responding to pandemic pressures. In a...
Read Article
If you’re a developer today, it’s hard not to love microservices. By adding agility and resiliency to applications, microservices architectures make it easier to build high-performing apps. But a...
Read Article
Digitization of state and local government services has been trending globally over the last decade. Naturally, COVID-19 accelerated demand for digital government services even more, so...
Read Article
APIs are like telephones: they have been around for quite a while, yet they have changed tremendously in recent years. And if you take the same approach to managing and securing them today as you...
Read Article
For those who don’t know me, I am a mother to two brilliant children who are better at the game of chess than an average kid their age, and their chess teacher advised them to find suitable chess...
Read Article
In organizations that encourage the usage of modern application development techniques to expedite the development, delivery, and deployment of custom software applications, the likelihood of...
Read Article
Global Developers think secure coding education can save time and money while adding personal and organizational value. The impact of COVID-19 has accelerated worldwide demand for increasing the...
Read Article
A Mandate from Federal Government Today, security is an absolute requirement. The Federal Government knows that security is a critical issue, so it mandated State and Local Government agencies...
Read Article
Last year at GitLab Commit, I presented our integration with GitLab to initiate Checkmarx security scans within your GitLab CI/CD pipeline. I walked through the progression of our integrations,...
Read Article
What’s Lurking Within? Malicious Code. Supply chain attacks occur when cyberthreat actors insert malicious code into trusted software, creating a vector to further compromise data or systems. To...
Read Article
Loading More...
