Collaborate Disseminate
The Economist effectively argues that “Data is the new Oil”. Most companies collect data that is important to their very survival and key to their competitive advantage. Losing this data has wide-ranging implications ranging from losing tru… Continue reading Why Data Loss Prevention (DLP) Must Evolve for Modern Applications
Gracefully Protecting Rapid Software Deployments — Part I
Prologue
Software has changed. What used to be monolithic services on the backend are now the massive deployments of microservices that constantly are spawned up and torn … Continue reading Gracefully Protecting Rapid Software Deployments
Gracefully Protecting Rapid Software Deployments — Part I
Prologue
Software has changed. What used to be monolithic services on the backend are now the massive deployments of microservices that constantly are spawned up and torn … Continue reading Gracefully Protecting Rapid Software Deployments
In security there are no silver bullets. It’s a cliche that rings true, more so now than ever before.
In this blog post, I want to provide some tips for writing secure code in the era of microservcies, and give you a simple metaphor to remem… Continue reading 5 Tips to Secure Your Microsevices Like an International Secret Agent
Most tech companies these days rely heavily on libre/open-source software, often contributed by volunteers in their spare time. ShiftLeft believes it is important to give back by contributing code and artifacts to the open-source community.
Today we ar… Continue reading Open Sourcing Our Specialized TinkerGraph with 70% Memory Reduction and Strict Schema Validation
The modern security landscape is one of ever evolving threats and challenges. Modern software engineers, Ops, IT infra, and SecOps often feel like Sisyphus. Every day we push a boulder to the top of a hill, only for it roll back down and start again. F… Continue reading DevSecOps Must Break AppSec’s Sisyphean Curse
We have made amazing progress at ShiftLeft this year, and we’re poised for even more success in 2018.
When we launched ShiftLeft, we wanted to build and deliver a great security product. We had a vision of the future of security, and we coul… Continue reading ShiftLeft in 2017 and Beyond
Within my work and outside of it, I am consistently reminded of the inherent tension between convenience and security. The easier something is to use, inevitably the less secure, and vice-versa. It’s like a seesaw: the more you have of one, the l… Continue reading Easing the Tension between Convenience and Security
Example multidimensional data plot from https://commons.wikimedia.org/wiki/File:Scatter_plot.jpg
In this article I’ll describe some of the design challenges and thought processes I go through when solving a common “entity list” design… Continue reading How-to nail data viz design for multidimensional data (Part 1)
As the cloud environment reaches maturity, it is increasingly becoming a security target. When it comes to cloud, security experts will need to decide who they can trust.
Next year, if they haven’t done so already, companies will need to dev… Continue reading 3 Application Security Predictions for 2018