Infrastructure Security: Page

Format-preserving encryption use cases, benefits, alternative

With format-preserving encryption, a ciphertext's format is the same as its plaintext's. Read up on the benefits of this cryptography method, NIST FPE methods, vendors and more.

By Michael Cobb • Sept. 22, 2020

Top 4 firewall-as-a-service security features and benefits

Firewall-as-a-service offerings implement security policies across consolidated traffic headed to all locations. Learn about four security features and benefits of FWaaS.

By Mike Chapple • Sept. 18, 2020

Security for SaaS applications starts with collaboration

Following established best practices helps enterprises facilitate collaboration and communication through SaaS applications while simultaneously ensuing secure SaaS use.

By Alicia Landsberg • Sept. 18, 2020

An inside look at the CCSP cloud security cert

Get insights into the Certified Cloud Security Professional cert, cloud infrastructure and platform benefits and risks, and more from the author of a CCSP exam guide.

By Sharon Shea • Sept. 16, 2020

Test your cloud security smarts with these CCSP exam questions

Read up on cloud-based BCDR in this excerpt from Chapter 4 of 'CCSP Certified Cloud Security Professional All-in-One Guide,' then quiz yourself to see what you've learned.

By McGraw Hill Education, Sharon Shea • Sept. 16, 2020

Cloud computing security technology quiz

As companies migrate to the cloud to improve accessibility and scalability, there are many aspects of security to consider. Test your cloud security knowledge with this quiz.

By Sharon Shea • Sept. 15, 2020

3 steps to secure codebase updates, prevent vulnerabilities

Codebase updates are critical, but what about when they introduce vulnerabilities? These three steps will help app developers secure codebase updates and keep their apps safe.

By Michael Cobb • Sept. 15, 2020

How cloud security posture management protects multi-cloud

Improve control plane security at your organization by integrating a cloud security posture management tool into your existing multi-cloud strategy.

By Dave Shackleford • Sept. 10, 2020

Site-to-site VPN security benefits and potential risks

Not every enterprise needs the functionality of a standard VPN client. A site-to-site VPN may be a better choice for some companies, but it's not without risk.

By Judith Myerson, Michael Heller • Aug. 28, 2020

10 RDP security best practices to prevent cyberattacks

Securing remote connections is critical, especially in a pandemic. Enact these RDP security best practices at your organization to prevent ransomware, brute-force attacks and more.

By Michael Cobb • Aug. 18, 2020

The case for cybersecurity by design in application software

Security must be part of IT from the start and then continue through the entire product lifecycle -- design, build, release and maintenance. Consumers now demand it.

By Michael Cobb • Aug. 3, 2020

How to mitigate an HTTP request smuggling vulnerability

Exploiting an HTTP request smuggling vulnerability can result in the inadvertent execution of unauthorized HTTP requests. Learn how to defend web environments from this attack.

By Mike Chapple • July 31, 2020

Security issues with working remotely (and how to fix them)

With companies continuing work from home for the foreseeable future, Rohit Dhamankar offers home security advice to help security teams and employees address security issues with working remotely.

By Rohit Dhamankar, Guest Contributor • July 31, 2020

As network security analysis proves invaluable, NDR market shifts

IT infrastructure threat detection and response have emerged as critical elements of enterprise cybersecurity as network security analysis proves invaluable to protecting data.

By Andrew Froehlich • July 29, 2020

Cloud security quiz: Application security best practices

Think you know all there is to know about securing apps in the cloud? Test your grasp of cloud application security best practices with this quiz.

By Sharon Shea • July 29, 2020

Cloud workload protection platform security benefits, features

VMs and cloud environments make the task of protecting workloads more difficult than ever. Can a cloud workload protection platform help your organization solve the problem?

By Ed Moyle • July 27, 2020

Complexity exacerbates cloud cybersecurity threats

As cloud becomes intrinsic to IT, shifting roles have led to some risks being overlooked. But companies are getting smarter about alleviating cloud cybersecurity threats.

By Mary Pratt • July 21, 2020

Attackers find new way to exploit Docker APIs

Aqua Security released research detailing a new tactic where the attacker exploits a misconfigured Docker API port in order to build and run a malicious container image on the host.

By Arielle Waldman • July 15, 2020

Interconnected critical infrastructure increases cybersecurity risk

Separately managed but interconnected critical infrastructure sectors are not all bound to security requirements and may be at risk of cascading attacks.

By Michael Heller • July 2, 2020

Microsoft acquires CyberX to strengthen IoT security offering

Microsoft is acquiring CyberX to boost its IoT security offerings, though it's unknown whether CyberX will remain a separate entity or be integrated into Microsoft.

By Alexander Culafi • June 22, 2020

How to prevent network eavesdropping attacks

One of the biggest challenges of network eavesdropping attacks is they are difficult to detect. Read about prevention measures to help keep your network safe from snoopers and sniffers.

By Sharon Shea • June 19, 2020

Istio service mesh security benefits microservices, developers

Learn more about Istio service mesh security features and how the open source technology can enable developers to better run, control and secure a distributed microservices architecture.

By Ed Moyle • June 17, 2020

VPC security best practices and how to implement them in AWS

To best secure network access, AWS administrators need to create rules for network resources. Learn how to implement Amazon VPC security best practices in this book excerpt.

By Katie Donegan, Manning Publications Co. • June 11, 2020

Identifying and troubleshooting VPN session timeout issues

Troubleshooting VPN session timeout and lockout issues should focus first on isolating where the root of the problem lies -- be it the internet connection, the VPN vendor or the user device.

By Michael Heller, Matthew Pascucci • June 11, 2020

Benefits of open source container vulnerability scanning

Containers have revolutionized app development but pose many security challenges. Uncover how container vulnerability scanning can help and why to consider open source tools.

By Ed Moyle • June 8, 2020