Systems | Development | Analytics | API | Testing

Keep Your Ruby App Secure with Bundler

This article covers the use of bundler features to secure Ruby applications. In this day and age, we have to be more and more careful about software supply chain security. We'll show you how to start this journey by relying on a Gemfile and bundler to manage your project's dependencies. By the end of the post, you will better understand how bundler audit and bundler outdated work. Both can help you monitor the security state of your project's dependency tree. Let's dive in!

How Complying with MISRA Improves Safety in C++ Applications

At Perforce, we have a long history of supporting applications that need to be stable and secure. With over 50 years of application development experience, we have learned many things from our customers, trends, and our competitors. We have taken best practices from all areas of software development and attempted to apply those to everything we do. We adopted unit testing, automated testing, agile development, code reviews, continuous integration, and much more.

Cookieless authentication in ThoughtSpot Everywhere

Amidst growing concerns around user privacy and regulatory laws, the cookieless paradigm has been gaining momentum over time in digital advertising. In addition, web browsers are increasingly blocking third-party cookies altogether in web sessions, necessitating the need for new authentication methods in web applications. Cookieless authentication is a secure way to verify user identities in web applications without relying on cookies.

GraphQL API Authorization Strategy with Kong Konnect and Styra DAS

In this talk, Claudio Acquaviva (Senior Solution Architect at Kong) and Ádám Sándor (Solutions Architect at Styra) discuss how to leverage Kong Konnect API Gateway and Styra Declarative Authorization Service (DAS) to build Open Policy Agent (OPA) authorization policies for GraphQL APIs. You will first learn how to implement a GraphQL API at Kong Gateway with OPA, followed by diving into Styra DAS to provide an enterprise-ready policy management platform to build, test, and deploy authorization policies.

What Is ISO 9001?

ISO 9001 gives specific requirements and criteria for an organization's quality management system (QMS). It is a broad, international standard that is used by any type of organization of any size. The most recent version of ISO 9001 was released in 2015 and aims to help companies improve customer experience, meet regulatory requirements, manage supplier and partner relationships, and achieve continual company success.

In the Driver's Seat with Konnect - Uplevel Your API Management Strategy

Join Manjiri Tapaswi (Senior Software Engineer, Konnect at Kong) for a ride around your Konnect organization’s administrative management! Learn how to secure and govern your environment by setting up Teams and Roles, or enable SSO through an external authenticator. We’ll go over how to leverage System Accounts for hardening your automation and integrations. Tune up your security risks monitoring, compliance maintenance, and responding to potential security incidents when they occur, by setting up and tracking Audit Logs.

Zero Trust Security: The What, Why and How

If you’ve been researching API security, you’ve likely seen the term “Zero Trust.” And you may already know that organizations can use Zero Trust to help protect their APIs from attacks. What you may not know is that Zero Trust is one of the best models for API security. According to Microsoft, “96 percent of security decision-makers state that Zero Trust is critical to their organization’s success.” But what is Zero Trust exactly?

Understand the Differences: API Authentication vs API Authorization

If you landed on this blog post, chances are that you care about keeping your API secure. It’s an important topic to discuss: API exploits are on the rise, and you don’t want unauthorized users accessing your data. A big part of that security is implementing API authentication and API authorization. These API access control measures are a foundational aspect of API security.