Infrastructure Security: Page

What is a next-generation firewall (NGFW)?

A next-generation firewall (NGFW) is a network security device that combines traditional firewall capabilities with advanced features to detect and block sophisticated cyberattacks.

By Casey Clark, Sharon Shea • June 2, 2025

What is a firewall and why do I need one?

A firewall is a network security device that prevents unauthorized access to a network by inspecting incoming and outgoing traffic using a set of predetermined security rules.

By Kinza Yasar , Ben Lutkevich • May 19, 2025

Key network security takeaways from RSAC 2025

Themes on display at the conference reflected the cybersecurity industry's effort to streamline security operations, while adapting to emerging technologies and threats.

By John Grady • May 7, 2025

How to use arpwatch to monitor network changes

The arpwatch utility flags administrators in the event of any unexpected changes or unauthorized devices, which could signal ARP spoofing or credential-harvesting attacks.

By Damon Garn • May 7, 2025

10 leading open source application security testing tools

Security testing enables companies to discover and remediate vulnerabilities and weaknesses in apps before malicious actors find them.

By Colin Domoney • May 7, 2025

How to ensure OT secure remote access and prevent attacks

OT systems face threats from attackers targeting their remote access capabilities. Segmenting networks is one important step. Learn other ways to safeguard your OT systems.

By Amanda Scheldt • April 15, 2025

What is cloud security?

Cloud security, or cloud computing security, is a set of policies, practices and controls deployed to protect cloud-based data, applications and infrastructure from cyberattacks and cyberthreats.

By Mary Shacklett , Kinza Yasar , Andrew Froehlich • April 14, 2025

IPsec vs. SSL VPNs: What are the differences?

New technologies get all the headlines, but VPNs aren't going away anytime soon. Speed and security are among the factors to consider when determining what type of VPN to use.

By John Burke • April 4, 2025

Making a case for the cybersecurity data fabric

When it comes to data, context is everything. Learn how a cybersecurity data fabric can supercharge a security team's ability to see the big picture.

By Tyler Shields • March 26, 2025

What is a web application firewall (WAF)? WAF explained

A web application firewall (WAF) is a firewall that is meant to protect web applications against common web-based threats.

By Alexander Gillis, Kinza Yasar • March 26, 2025

Cloudflare unveils tools for safeguarding AI deployment

The cybersecurity vendor's new suite helps businesses, developers and content creators deploy AI technology at scale safely and securely.

By Esther Shittu • March 20, 2025

What is a buffer overflow? How do these types of attacks work?

A buffer overflow occurs when a program or process attempts to write more data to a fixed-length block of memory, or buffer, than the buffer is allocated to hold.

By Michael Cobb, Katie Terrell Hanna • March 17, 2025

How to secure AI infrastructure: Best practices

AI tools are creating an even greater attack surface for malicious hackers to penetrate. But there are steps you can take to ensure your organization's AI foundation remains safe.

By Jerald Murphy • March 14, 2025

How to build an application security program

A well-defined application security program that includes multilayer software testing, SBOMs, and documentation and standards is vital to protect apps from threat actors.

By Colin Domoney • March 13, 2025

What is promiscuous mode in networking?

In computer networking, promiscuous mode is a mode of operation in which a network device, such as a network interface card (NIC) or an adapter on a host system, can intercept and read in its entirety each network packet that arrives instead of just the packets addressed to the host.

By Rahul Awati • March 6, 2025

Using shred and dd commands in Linux to securely wipe data

When it's time to get rid of old systems or when moving one system from one location to another, it's a good idea to use Linux utilities to securely delete existing data.

By Damon Garn • March 6, 2025

Types of DNS servers and how they work, plus security threats

DNS security is a critical component of system administration. Learn about five types of DNS servers, what each does and the security threats each server faces.

By Damon Garn • March 4, 2025

What is a DMZ in networking?

In computer networks, a DMZ, or demilitarized zone, is a physical or logical subnet that separates a local area network (LAN) from other untrusted networks -- usually, the public internet. DMZs are also known as perimeter networks or screened subnetworks.

By Ben Lutkevich, Nick Barney • Feb. 27, 2025

How to improve third-party API integration security

External API integrations are critical, but so is managing third-party API risks to maintain customer trust, remain compliant and ensure long-term operational resilience.

By Jerald Murphy • Feb. 26, 2025

WAF vs. RASP for web app security: What’s the difference?

Web application firewalls use a negative security model, while runtime application self-protection tools use a positive security model. Which is better at keeping apps secure?

By Colin Domoney • Feb. 25, 2025

Changing perceptions of network security tools from CSPs

Research from Enterprise Strategy Group found the conversation about cloud service provider and third-party vendor network security tools is changing.

By John Grady • Feb. 24, 2025

What is application allowlisting?

Application allowlisting, previously known as 'application whitelisting,' is the practice of specifying an index of approved software applications or executable files that are permitted to be present and active on a computer system.

By Peter Loshin, Brien Posey, Mary Shacklett • Feb. 21, 2025

What is TLS (Transport Layer Security)? Definition & Uses

Transport Layer Security (TLS) is an Internet Engineering Task Force (IETF) standard protocol that provides authentication, privacy and data integrity between two communicating computer applications.

By Scott Robinson , Andrew Froehlich , Kevin Beaver • Feb. 20, 2025

How to build an API security strategy

Lax API protections make it easier for threat actors to steal data, inject malware and perform account takeovers. An API security strategy helps combat this.

By Colin Domoney • Feb. 11, 2025

How to use pfSense: Use cases and initial configurations

Open source firewall and routing software pfSense offers a compelling mix of capabilities that can work for organizations large and small.

By Damon Garn • Feb. 11, 2025