Author: dojo.live

This article explores the vital role of implementing ASVS in software projects, highlighting its ability to fortify defenses, mitigate vulnerabilities, and safeguard against potential security threats, thereby ensuring robust and resilient applications.

        In this article, we will talk about Hyperledger Fabric, a permissioned blockchain, and share our experiences with a simple proof-of-concept implementation for a car supply chain.

SummaryAs a developer, it’s common to download tool packages that help us create projects, such as a language, a library, a framework, or a mix of all of those.If we add Docker to this combination, we can see the importance of downloading these packages since by default a Docker container has nothing inside it, and it is through an image that we communicate to Docker the packages that we need to download and install to work. Downloading and installation can take a long time, and the problem increases if this has to be repeated a number of times.

How do companies secure infrastructure when there is no traditional network edge? Now networks can be in the cloud, local, or a hybrid, with resources and users dispersed globally. Companies need the right technology practices in place to address the security concerns arising from complex and widespread infrastructure. Zero trust data protection is an approach companies can take to secure networks, but what is zero trust? Read on to learn the principles and benefits of zero trust data security. 

Centralized identity systems are vulnerable to many issues, such as constant attacks, data breaches, slow verification, and fraudulent activity. Malicious parties can easily fake credentials, leading to devastating consequences, while legitimate parties can get bogged down in bottlenecks created by manual verification systems. Decentralized identity, and decentralized identifiers (DID), enter as a verifiable cryptographic alternative to address these challenges, and many more, that centralized identity systems present. Encora created this guide to define decentralized identity, explain how it works, describe three major applications, and outline the benefits it unlocks. 

Now that cloud-based solutions are nearly ubiquitous, companies are looking for ways to achieve more autonomy and decouple from cloud-based providers. Serverless CI/CD is a technology practice that addresses the challenges and dynamics of tight coupling with a provider and integrating new code. This guide defines serverless CI/CD, explains the working principles, and examines why it is rising in popularity. 

As companies advance digital transformation and move more assets to the cloud, app security and workload protection concerns rise. Hackers and malicious parties always look for vulnerabilities, and companies need the right technology practices. Traditionally, code is evaluated for security loopholes before it is released, but this is not always the best approach. Delaying security assessments and creating security measures until late in the development phase can raise costs, increase risks, and undermine the overall effectiveness of security. For the most effective results, application security must be prioritized early on and throughout the development lifecycle, and shift left security helps

Data is extensively available. Countless devices collect and track highly valuable information. The information is also commonly sensitive, highly personal, or proprietary information. It involves personal information, intellectual property, and other unique attributes. There is a strict mandate for a technology practice that balances the dialectics of privacy requirements with the benefits of using data for insights to improve business operations, advance research, and more. This is where data ethics comes into play. This guide defines data ethics, discusses the importance and principles of data ethics, and explores examples of ethical use of data.