Phil Windley

SEPTEMBER 28, 2020

Summary: The architecture of an identity system has a profound impact on the nature of the relationships it supports. This blog post uses terminology and ideas from Sam's paper to classify and analyze three different identity system architectures. In particular his terminology was helpful to me. Wikipedia defines legitimacy as.

Architecture 138

Architecture System Authentication Security 138

Scott Lowe

MAY 27, 2022

Isovalent—the company behind the Cilium project—has been talking a lot about how the use of eBPF will transform things, including the architecture of a service mesh. Along those lines, one of their latest articles discusses how to achieve identity-based mutual authentication leveraging eBPF. network virtualization).

Virtualization 79

Virtualization Storage Network Programming 79

Linux Academy

MARCH 28, 2019

As organizations increase their use of Kubernetes in public and Hybrid cloud architectures, it is important not to let a maiden voyage end like a Titanic catastrophe. To ensure ongoing security site reliability engineers must work hand-in-hand with the CISO’s (Chief Information Security Officer) office to implement Kubernetes security.

Policies 68

Policies Linux Security Virtualization 68

Cloud Musings

NOVEMBER 20, 2016

Quoting his OpenStack Summit keynote : "Even across Mirantis-powered OpenStack clouds like AT&T and the Volkswagen cloud, they are both based on the same distribution, but the underlying reference architectures are dramatically different…Volkswagen can't throw something at AT&T and it will just work."

Cloud 107

Cloud IBM Applications Architecture 107

Scott Lowe

AUGUST 22, 2013

Just to quickly recap what’s happened so far, in part 1 I provided the high-level architecture of NVP and discussed the role of the components in broad terms. Create a Transport Zone. Before you can actually add the hypervisor to NVP, you first need to ensure that you have a transport zone defined. Click Save.

Transportation 60

Transportation Linux Network Virtualization 60

CIO Business Intelligence

NOVEMBER 28, 2023

And while all organizations work hard to prevent attacks through traditional security measures such as multi-factor authentication, patching, training, and more, the bad guys increasingly find their way in through poorly thought-out, scattered access and identity management practices.

Security 121

Security Artificial Intelligence Authentication Financial 121

ForAllSecure

MARCH 23, 2023

No matter what approach you take to building your API, it’s important to test your API for security. In this post, we’ll first cover general principles of API security, then we’ll break down specific recommendations and examples for testing REST, gRPC and GraphQL.

Authentication 75

Authentication How To Transportation Security 75

Phil Windley

DECEMBER 28, 2020

Summary: The self-sovereign internet, a secure overlay on the internet, provides the same capacity to produce change by numerous, unaffiliated and uncoordinated actors as the internet itself. TLS (HTTPS) is a secure overlay, but it is incomplete because it's not symmetrical. This kind of "layer" is called an overlay network.

Internet 135

Internet Network Architecture Security 135

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. How then does one start securing it? In 2013, researcher Nitesh Dhanjani found that a popular brand used simple MD5 hashes of the device's MAC addresses for authentication.

Internet 52

Internet Research Security Tools 52

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. How then does one start securing it? In 2013, researcher Nitesh Dhanjani found that a popular brand used simple MD5 hashes of the device's MAC addresses for authentication.

Internet 52

Internet Research Security Tools 52

ForAllSecure

DECEMBER 17, 2021

Knudsen: My name is Jonathan Knutson, and I am a security researcher at synopsis. Give it, stuff that's hard to deal with, and then if it breaks, you can fix it, and it's more robust and more secure by the time you actually release it. In software security, a broker is something that gathers and reports information.

Open Source 52

Open Source Software Software Applications 52

Phil Windley

JULY 16, 2020

Identity usually conjures thoughts of authentication and various federation schemes that purport to make authentication easier. We call this a "connection" since DIDs are cryptographically based and thus provide a means of both parties mutually authenticating.

Authentication 95

Authentication System Data Architecture 95

CIO Business Intelligence

AUGUST 8, 2023

SalesHub+ is an iPhone app with modern architecture like MVVM [Model-View-ViewModel, which enables separation of the business logic of an application from the user interface], reactive pipelines, and other flexible patterns,” Venkat says. Moving all the systems in our ecosystem to Okta was a major accomplishment.

Retail 98

Retail Applications Mobile System 98

Phil Windley

JANUARY 26, 2021

The Generative Self-Sovereign Internet explored the generative properties of the self-sovereign internet, a secure overlay network created by DID connections. She might also use it at partner websites (like the benefits provider) to provide shared authentication without federation (and it's associated infrastructure).

Internet 71

Internet Authentication Architecture Examples 71

Phil Windley

AUGUST 20, 2019

An identity metasystem can remove the friction, decrease cognitive overload, and make online interactions more private and secure. It implies we need a simple encapsulating protocol (a way of agreeing on and transporting things). Messaging —the architecture must support messaging between the parties to those relationships.

Internet 102

Internet Banking System Architecture 102

Chief Seattle Greek Blog

JUNE 7, 2016

But why would any police department or fire department or transportation authority or electric utility or other agency which responds to public safety incidents ever “buy” and use FirstNet? PSCR’s Mobile Architecture. PSCR is actively working on a mobile device architecture which would enable these capabilities.

Network 28

Network Transportation Applications Examples 28