Infrastructure Security: Page

AI helps humans speed app modernization, improve security

Enterprises are looking at AI-driven approaches to help human teams modernize and accelerate application development to refactor or build new apps and beef up cybersecurity.

By Paul Nashawaty, Melinda Marks • June 29, 2023

How API gateways improve API security

API gateways keep APIs secure by providing rate limiting, DDoS protection and more. Learn more about these benefits, along with API gateway security best practices.

By Michael Cobb • June 26, 2023

How AI benefits network detection and response

Interest in security tools with AI is growing as security leaders uncover AI's potential. One area that could especially benefit from AI is network detection and response.

By John Grady • June 21, 2023

Implement zero trust to improve API security

Not all organizations have an API security strategy in place. Using zero trust in API security is one way to protect APIs and reduce their changes of being attacked.

By Ashwin Krishnan • June 20, 2023

App development trends and their security implications

Enterprise Strategy Group analysts look at how organizations are modernizing software development processes and how security teams can support the growth and scale.

By Paul Nashawaty, Melinda Marks • June 19, 2023

New AWS security tools, updates help IT protect cloud apps

AWS released a slew of updates to improve security as IT pros develop and deploy more enterprise applications via public cloud services.

By Melinda Marks • June 19, 2023

Use IoT hardening to secure vulnerable connected devices

IoT and industrial IoT innovation continue to thrive, but IoT device security continues to be an afterthought. Companies should harden connected devices to remain protected.

By Michael Cobb • June 16, 2023

AWS launches EC2 Instance Connect Endpoint, Verified Permissions

At re:Inforce 2023, AWS launched a new service that allows customers to connect to their EC2 instances through SSH and RDP connections, removing the need for a public IP address.

By Rob Wright • June 13, 2023

Attack surface reduction rules for Microsoft productivity apps

Attack surface reduction rules in Microsoft Defender for Endpoint help prevent apps from launching executable files and scripts, running suspicious scripts and more.

By Packt Publishing, Kyle Johnson • June 5, 2023

Manage security posture with Microsoft Defender for Endpoint

Organizations need to implement security posture management to ensure their cybersecurity strategy can address malicious actions inside and out.

By Kyle Johnson • June 5, 2023

Acronis adds EDR to endpoint security

Acronis EDR uses Intel threat detection technology to uncover sophisticated attacks, such as fileless malware, but it also has to compete in a crowded market.

By Nicole Laskowski • May 18, 2023

Addressing the confusion around shift-left cloud security

To clarify how shift-left security should work in terms of cloud-based application development, Enterprise Strategy Group analyst Melinda Marks dives deep into the process.

By Melinda Marks • May 9, 2023

application blacklisting (application blocklisting)

Application blacklisting --increasingly called application blocklisting -- is a network or computer administration practice used to prevent the execution of undesirable software programs.

By Robert Sheldon • May 9, 2023

How to start handling Azure network security

Before adopting Microsoft Azure, it's important to consider how to secure the cloud network. That's where network security groups and Azure Firewall come in.

By Kyle Johnson • May 5, 2023

cloud workload protection

Cloud workload protection is the safeguarding of workloads spread out across multiple cloud environments. Businesses that use public and private clouds can use cloud workload protection platforms to help defend themselves against cyber attacks.

By Ian Palmer • April 19, 2023

Microsoft Defender for Endpoint (formerly Windows Defender ATP)

Microsoft Defender for Endpoint -- formerly Microsoft Defender Advanced Threat Protection or Windows Defender ATP -- is an endpoint security platform designed to help enterprise-class organizations prevent, detect and respond to security threats.

By Brien Posey, Alexander Gillis • April 13, 2023

AWS CloudTrail

AWS CloudTrail is an application program interface (API) call-recording and log-monitoring service offered by Amazon Web Services (AWS).

By Madelyn Bacon • April 11, 2023

intrusion prevention system (IPS)

An intrusion prevention system (IPS) is a cybersecurity tool that examines network traffic to identify potential threats and automatically take action against them.

By Alexander Gillis • April 11, 2023

An intro to the IDMZ, the demilitarized zone for ICSes

Setting up an IDMZ -- a demilitarized zone between enterprise and industrial networks -- can prevent operational environments from becoming compromised by IT threats.

By Sharon Shea • April 5, 2023

ICS kill chain: Adapting the cyber kill chain to ICS environments

As IT/OT convergence continues to gain traction, industrial control system security cannot be ignored. Performing pen tests based on the ICS Kill Chain can help.

By Packt Publishing, Sharon Shea • April 5, 2023

Reinforce industrial control system security with ICS monitoring

Monitoring an industrial control system environment isn't that different from monitoring a traditional IT environment, but there are some considerations to keep in mind.

By Sharon Shea • April 5, 2023

Why medical device vulnerabilities are hard to prioritize

Vulnerabilities in critical medical devices could lead to loss of life. But opinions are mixed on how serious the risk is to patient safety and how best to address the flaws.

By Alexis Zacharakos • April 3, 2023

How to mitigate low-code/no-code security challenges

Don't adopt low-code/no-code application development approaches without considering these best practices to mitigate and prevent their inherent security risks.

By Dave Shackleford • March 28, 2023

4 ChatGPT cybersecurity benefits for the enterprise

As OpenAI technology matures, ChatGPT could help close cybersecurity's talent gap and alleviate its rampant burnout problem. Learn about these and other potential benefits.

By Ashwin Krishnan • March 21, 2023

4 cloud API security best practices

APIs make up the majority of web traffic now, but they aren't always kept as secure as needed. Consider implementing these four cloud API security best practices.

By Dave Shackleford • March 20, 2023