Infrastructure Security: Page

7 key types of application security testing

Modern application development moves at unprecedented speed. Is your security testing keeping pace so that apps are secure when they reach production?

By Colin Domoney • Sept. 26, 2025

7 API discovery best practices for complete visibility

Secure your API landscape with these API discovery best practices spanning the entire SDLC. Find hidden endpoints, audit integrations and monitor continuously.

By Colin Domoney • Sept. 24, 2025

8 best practices for securing RESTful APIs

The REST architectural style helps applications communicate with each other. Be sure RESTful APIs have the protections necessary to keep attackers at bay.

By Ravi Das • Sept. 22, 2025

How to use arp-scan to discover network hosts

An arp-scan delivers a fast, focused scan of an organization's local subnet. It is not fancy, but it's an easily controlled method to learn exactly what's connected.

By Damon Garn • Sept. 17, 2025

Positive vs. negative security: Choosing an AppSec model

Understand the benefits and challenges of positive and negative security models to determine how to best protect web apps in your organization.

By Paul Kirvan • Sept. 11, 2025

Cyber Trust Mark certification and how IoT devices will qualify

The U.S. Cyber Trust Mark aims to validate IoT devices that meet a certain security threshold. Explore key NIST recommendations informing certification requirements.

By Karen Kent , Alissa Irei • Sept. 4, 2025

What is Triple DES and why is it disallowed?

Triple DES offered 112-bit security through its three-step encryption process, but NIST deprecated it in 2018 and disallowed its use after 2023.

By Michael Cobb • Sept. 3, 2025

How to use Masscan for high-speed port scanning

Masscan delivers a quick assessment of open ports and listening services, but it helps to pair the utility with other scanning tools, such as Nmap.

By Damon Garn • Aug. 27, 2025

How to use Netdiscover to map and troubleshoot networks

Read installation info, basic commands and practical applications for Netdiscover, an ARP-based tool that identifies live hosts, detects unauthorized devices and enhances security.

By Damon Garn • Aug. 26, 2025

Use an AI gateway to secure AI models and applications

AI gateways provide critical security controls for enterprise AI applications, preventing data loss while managing access.

By Amy DeCarlo • Aug. 20, 2025

Use ssh-keygen to generate new key pairs: A full tutorial

Use ssh-keygen to create new key pairs, copy host keys, use a single login key pair for multiple hosts, retrieve key fingerprints and more.

By Damon Garn • Aug. 19, 2025

News brief: Rising OT threats put critical infrastructure at risk

Check out the latest security news from the Informa TechTarget team.

By Staff report • Aug. 15, 2025

SSH tunneling explained: A tutorial on SSH port forwarding

SSH tunneling creates secure encrypted connections through private and untrusted networks, enabling remote access, bypassing restrictions and protecting sensitive data transfers.

By Damon Garn • Aug. 15, 2025

How to use Nmap to scan ports: A complete tutorial

Nmap is a versatile open source security tool that scans ports to identify vulnerabilities, test firewall rules, inventory networks and troubleshoot connectivity issues.

By Damon Garn • Aug. 11, 2025

The differences between inbound and outbound firewall rules

Firewalls can support both inbound and outbound firewall rules, but there are important differences between the two. Learn more about each and their uses.

By Michael Cobb , Kevin Beaver • July 30, 2025

DLP and DSPM: Navigate policy challenges and quiet alert noise

As practitioners battle DLP policy inconsistency and alert fatigue, a wave of complementary DSPM deployments is coming. Learn how to get the most bang for your buck.

By Todd Thiemann • July 28, 2025

How to discover and manage shadow APIs

Connecting applications, especially if external-facing, with unapproved APIs is a recipe for disaster. Detecting and managing shadow APIs is vital to keeping the company secure.

By Dave Shackleford • July 25, 2025

An explanation of firewall types and uses

Firewalls protect networks by stopping malware at the perimeter. The various types can be deployed with other security measures but can also be used unethically to prohibit access.

By Sabrina Polin • July 22, 2025

What is cybersecurity mesh? Key applications and benefits

Is it time to consider a different approach to security architecture? Cybersecurity mesh might be an effective way to address complex, distributed environments.

By Ed Moyle • July 15, 2025

10 remote work cybersecurity risks and how to prevent them

Larger attack surfaces, limited oversight of data use, AI-driven attacks and vulnerable enterprise technologies are among the security risks faced in remote work environments.

By Mary Pratt • June 25, 2025

SentinelOne vs. CrowdStrike: EPP tools for the enterprise

Compare SentinelOne and CrowdStrike endpoint protection platforms, which both offer strong endpoint security with GenAI, but differ in pricing tiers and specialized strengths.

By Karen Kent • June 23, 2025

What is an attack surface? Examples and best practices

An attack surface is the total number of possible entry points and attack vectors an organization or system has that are susceptible to unauthorized access.

By Katie Terrell Hanna, Alexander Gillis • June 18, 2025

How to create an SBOM: Example and free template

SBOMs provide an inventory of every component in an organization's software supply chain. Use this free downloadable SBOM template to create one for your organization.

By Rob Shapland • June 17, 2025

Zscaler delivers network, data security tools at Zenith Live

Zscaler has expanded beyond ZTNA with three strategic pillars and aims to challenge traditional security infrastructure.

By John Grady • June 16, 2025

How to implement effective app and API security controls

Security leaders must implement multilayered strategies combining threat modeling, balanced controls, cloud-first approaches and more to protect apps and APIs from evolving threats.

By William Dupre, Gartner • June 10, 2025