Posts by Farshad Abasi

Blockchain and Its Impact on Information Security’s CIA-Triad

What is the CIA Triad? Before we get into the details of how blockchain can improve information security, let’s talk about the CIA triad. No, not the government agency, but…

Embedding Security Into Software During Development

Security has traditionally been focused at the infrastructure level, particularly at the edge of the network where traffic flows across trusted and untrusted network segments. This is accomplished by using…

Application Security for Busy Tech Execs

We have created this series to help busy technology executives like you navigate through the cloudy and often poorly understood field of application security and array of options out there. In this series we will discuss some of the key pillars of application security in 1-2 min video capsules to save you time and help make the best decision.

SAST, SCA, DAST, IAST, RASP: What They Are and How You Can Automate Application Security

Application security is an ongoing challenge throughout the entire software development life cycle (SDLC). Today, more and more development teams are shifting to Agile and DevOps SDLCs to rapidly build…

The Three Pillars of Implementing DevSecOps

With application-related attacks on the rise, it’s never been more critical to ensure that security is baked into the fabric of your software development and operation practices. Furthermore, addressing issues early in the…

Why ASVS Is The Gold Standard For Application Security

According to Contrast Security’s 2020 Application Security Observation Report, 96% of web apps have at least one vulnerability, and 26% of those are serious. The continued proliferation of application vulnerabilities…

Securing Modern API and Microservices-Based Apps by Design – Part 2

Combine existing security concepts and best practices together and design more secure distributed applications. Introduction Part 1 of this two-part series discussed what services and microservices are, the role of APIs and API gateways in modern application…

Securing Modern API and Microservices-Based Apps by Design – Part 1

Combine existing security concepts and best practices together and design more secure distributed applications. Introduction A common approach to modernizing applications is to use APIs and decompose them into smaller units that typically live in containers. These approaches involve many concepts…