Fosstodon

0 posts0 participants0 posts today

HabrТри мушкетера из мира DevSecOps. Внедряем инструменты для развития AppSec-процессовПривет, Хабр! С вами Максим Коровенков, DevSecOps Lead в Купер.техе. Продолжаем цикл статей про построение DevSecOps с нуля. Это большой гайд from zero to, надеюсь, hero.<a href="https://habr.com/ru/companies/kuper/articles/890972/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://habr.com/ru/companies/kuper/articles/890972/</a><a href="https://zhub.link/tags/asoc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#asoc</a> <a href="https://zhub.link/tags/devsecops" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#devsecops</a> <a href="https://zhub.link/tags/appsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#appsec</a>

HabrWAF: интеграция в SOC через SIEM или ASOC? (Часть 2)Преимущества интеграции SOC и WAF для мониторинга API Здесь бы хотелось рассказать, как быть с событиями которые показывают аномалии в API и как использовать эти события при интеграции с SIEM-системами. Тут мы с Сергеем попробовали разобрать наиболее частые вариации. Но если у вас есть свои примеры – добро пожаловать в комментарии! Основные полезности, для условной 1-й линии SOC можно распределить на 2 группы: Мониторинг API-активности. SOC может использовать интегрированные в WAF системы обнаружения API для мониторинга активности взаимодействия с API, включая запросы, ответы, аутентификацию и авторизацию. Это позволяет обнаруживать подозрительную или незаконную активность, такую как несанкционированные попытки доступа или использование API для атак. Обнаружение аномалий в API-трафике: Интеграция с системами обнаружения API позволяет SOC анализировать трафик и обнаруживать аномалии, такие как необычные или аномально высокие объемы запросов, необычные паттерны поведения или подозрительные изменения в обработке данных. Подобные ситуации характерны для поведенческих атак, таких как: перебор паролей, перебор идентификаторов сессии, принудительный просмотр ресурсов веб‑приложения (Forced Browsing), подстановка учетных данных. В каких ситуациях это может быть важно. Аномалия в API-трафике, связанная с резким повышение количества запросов к конечным точкам инфраструктуры содержащих аутентификационные данные, например пароли, токены и секретные ключи. На иллюстрации ниже представлено отображение таких эндпоинтов в «ПроAPI Структура» с указанием типов чувствительных данных (токен, пароль и т.д.) и количества хитов/атак.<a href="https://habr.com/ru/companies/webmonitorx/articles/842138/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://habr.com/ru/companies/webmonitorx/articles/842138/</a><a href="https://zhub.link/tags/%D0%B8%D0%BD%D1%84%D0%BE%D1%80%D0%BC%D0%B0%D1%86%D0%B8%D0%BE%D0%BD%D0%BD%D0%B0%D1%8F_%D0%B1%D0%B5%D0%B7%D0%BE%D0%BF%D0%B0%D1%81%D0%BD%D0%BE%D1%81%D1%82%D1%8C" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#информационная_безопасность</a> <a href="https://zhub.link/tags/%D0%BA%D0%B8%D0%B1%D0%B5%D1%80%D0%B1%D0%B5%D0%B7%D0%BE%D0%BF%D0%B0%D1%81%D0%BD%D0%BE%D1%81%D1%82%D1%8C" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#кибербезопасность</a> <a href="https://zhub.link/tags/waf" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#waf</a> <a href="https://zhub.link/tags/soc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#soc</a> <a href="https://zhub.link/tags/siem" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#siem</a> <a href="https://zhub.link/tags/asoc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#asoc</a> <a href="https://zhub.link/tags/application_security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#application_security</a> <a href="https://zhub.link/tags/api" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#api</a> <a href="https://zhub.link/tags/web_security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#web_security</a> <a href="https://zhub.link/tags/web_application_firewall" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#web_application_firewall</a>

HabrAppSec-платформа для сотен миллионов строк кодаСегодня я хочу рассказать про нашу внутреннюю AppSec-разработку – платформу Security Gate. Начну с предпосылок для ее создания, подробно опишу архитектуру решения и поделюсь открытиями и маленькими неожиданностями, которые ждали нас (и могут ждать любого в рамках построения похожего инструмента). В этой статье мы оставим за рамками то, какое значение имеет UX в построении платформы — об этом можно написать отдельную статью, поскольку этой теме хочется уделить особое внимание.<a href="https://habr.com/ru/companies/vk/articles/824496/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://habr.com/ru/companies/vk/articles/824496/</a><a href="https://zhub.link/tags/appsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#appsec</a> <a href="https://zhub.link/tags/asoc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#asoc</a> <a href="https://zhub.link/tags/application_security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#application_security</a> <a href="https://zhub.link/tags/%D1%80%D0%B0%D0%B7%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%BA%D0%B0" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#разработка</a> <a href="https://zhub.link/tags/%D0%B8%D0%BD%D1%84%D0%BE%D1%80%D0%BC%D0%B0%D1%86%D0%B8%D0%BE%D0%BD%D0%BD%D0%B0%D1%8F_%D0%B1%D0%B5%D0%B7%D0%BE%D0%BF%D0%B0%D1%81%D0%BD%D0%BE%D1%81%D1%82%D1%8C" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#информационная_безопасность</a>

APECS Germany📢 Event alert: How do ❄️polar scientists 🥼 contribute to decision making and policy? (And how do ECRs get involved in this?)We are hosting three events 🗓️ to give you a crash-course overview of this topic as well as the opportunity to talk to some experts directly. You can attend as many or few of the events as you like, all times are in CEST (Berlin time).<a href="https://apecs-germany.de/lets-talk-polar-policy-and-governance/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://apecs-germany.de/lets-talk-polar-policy-and-governance/</a><a href="https://wisskomm.social/tags/PolarScience" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PolarScience</a> <a href="https://wisskomm.social/tags/Antarctica" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Antarctica</a> <a href="https://wisskomm.social/tags/Arctic" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Arctic</a> <a href="https://wisskomm.social/tags/SOOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOOS</a> <a href="https://wisskomm.social/tags/CCAMLR" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CCAMLR</a> <a href="https://wisskomm.social/tags/ASOC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ASOC</a> <a href="https://wisskomm.social/tags/SCAR" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SCAR</a> <a href="https://wisskomm.social/tags/AntarcticTreaty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AntarcticTreaty</a> <a href="https://wisskomm.social/tags/ArcticCouncil" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ArcticCouncil</a> <a href="https://wisskomm.social/tags/PolarPolicy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PolarPolicy</a>

Melinda MarksIt's taken me almost a year to write (and edit) my rant about categories and acronyms in cybersecurity. Which acronyms or categories annoy you the most? Security teams don't need more tools, they need efficient ways to mitigate risk and respond quickly to threats or attacks - especially now to keep up with faster development cycles. <a href="https://www.techtarget.com/searchsecurity/opinion/Cloud-native-app-security-Ignore-acronyms-solve-problems" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.techtarget.com/searchsecurity/opinion/Cloud-native-app-security-Ignore-acronyms-solve-problems</a> <a href="https://infosec.exchange/tags/cloudsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cloudsecurity</a> <a href="https://infosec.exchange/tags/applicationsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#applicationsecurity</a> <a href="https://infosec.exchange/tags/appsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#appsec</a> <a href="https://infosec.exchange/tags/cspm" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cspm</a> <a href="https://infosec.exchange/tags/sast" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sast</a> <a href="https://infosec.exchange/tags/dast" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dast</a> <a href="https://infosec.exchange/tags/iast" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#iast</a> <a href="https://infosec.exchange/tags/sca" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sca</a> <a href="https://infosec.exchange/tags/sbom" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sbom</a> <a href="https://infosec.exchange/tags/ciem" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ciem</a> <a href="https://infosec.exchange/tags/asoc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#asoc</a> <a href="https://infosec.exchange/tags/dspm" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dspm</a> <a href="https://infosec.exchange/tags/aspm" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#aspm</a> <a href="https://infosec.exchange/tags/cnapp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cnapp</a> <a href="https://infosec.exchange/tags/cdr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cdr</a> <a href="https://infosec.exchange/tags/mdr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mdr</a> <a href="https://infosec.exchange/tags/itdr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itdr</a> <a href="https://infosec.exchange/tags/ndr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ndr</a> <a href="https://infosec.exchange/tags/mdr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mdr</a> <a href="https://infosec.exchange/tags/xdr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#xdr</a> <a href="https://infosec.exchange/tags/edr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#edr</a> <a href="https://infosec.exchange/tags/cnapp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cnapp</a> <a href="https://infosec.exchange/tags/wapp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#wapp</a> <a href="https://infosec.exchange/tags/devsecops" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#devsecops</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/ciso" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ciso</a> <a href="https://infosec.exchange/tags/cso" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cso</a>

Melinda MarksLooking forward to moderating this panel at <a href="https://infosec.exchange/tags/AppSecCon23" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AppSecCon23</a> on Alphabet Soup: addressing the acronyms in cybersecurity including <a href="https://infosec.exchange/tags/ASOC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ASOC</a>, <a href="https://infosec.exchange/tags/ASPM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ASPM</a>, <a href="https://infosec.exchange/tags/RBVM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RBVM</a>, <a href="https://infosec.exchange/tags/UVM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UVM</a><a href="https://infosec.exchange/tags/cloudsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cloudsecurity</a> <a href="https://infosec.exchange/tags/appsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#appsec</a> <a href="https://infosec.exchange/tags/devsecops" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#devsecops</a> <a href="https://infosec.exchange/tags/purplebook" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#purplebook</a><a href="https://infosec.exchange/tags/AppSecCon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AppSecCon</a><a href="https://infosec.exchange/tags/JourneyToAppSecMaturity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#JourneyToAppSecMaturity</a>

Olaf EisenStatement of @AntarcticaSouth <a href="https://fediscience.org/tags/ASOC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ASOC</a> on the <a href="https://fediscience.org/tags/Helsinki" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Helsinki</a> Declaration on Climate Change for Antarctica adopted by @AntarcticTreaty "The Antarctic Treaty Consultative meeting <a href="https://fediscience.org/tags/ATCM45" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ATCM45</a> ended this week with outcomes that do not reflect the magnitude of the <a href="https://fediscience.org/tags/climate" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#climate</a> and <a href="https://fediscience.org/tags/biodiversity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#biodiversity</a> crises currently facing the region. ..." @iccenet <a href="https://mstdn.social/@Wwf" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@Wwf</a> <a href="https://mas.to/@umwelthilfe" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@umwelthilfe</a> <a href="https://www.asoc.org/media-releases/atcm-2023-closing-press-release" rel="nofollow noopener noreferrer" target="_blank">https://www.asoc.org/media-releases/atcm-2023-closing-press-release</a>

https://purl.org/rzr#<a href="https://purl.org/rzr/playlist#" rel="nofollow noopener noreferrer" target="_blank">https://purl.org/rzr/playlist#</a> <a href="https://mastodon.social/tags/LEE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LEE</a> my playlist of related videos : <a href="https://mastodon.social/tags/ASoC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ASoC</a>: Supporting <a href="https://mastodon.social/tags/Audio" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Audio</a> on an <a href="https://mastodon.social/tags/Embedded" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Embedded</a> Board <a href="https://mastodon.social/tags/LiveEmbedded" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LiveEmbedded</a> vent 2020

heise online (inoffiziell)Es klingt nach Star Wars, doch tatsächlich hat die Sicherheit im Weltraum für Wirtschaft, Staat und Gesellschaft enorme Bedeutung gewonnen. <a href="https://www.heise.de/news/Bundeswehr-stellt-Weltraumoperationszentrum-in-Dienst-4906457.html" rel="nofollow noopener noreferrer" target="_blank">Bundeswehr stellt Weltraumoperationszentrum in Dienst</a>

Recent searches

Search options

Administered by:

Server stats:

#ASOC