Listening to Web Attacks Remixed!
Early last year I published a fun tool called sigsci-sounds for users of Signal Sciences — my prior ...
Category: Web Application Security
Security’s Shift Right
Software development has gotten tricky. If you have been in the DevOps game in the past few years, t...
Auditing Signal Sciences Configuration
Signal Sciences offers tremendous capabilities to defend web applications. I’m not talking just abou...
Using Signal Sciences to Defend Apache Struts CVE-2018-11776
Patching servers is a notoriously difficult problem to address. Software gets out-of-date and new vu...
Introducing New Product Features: Power Rules and Network Learning Exchange (NLX)
We've just come out of our bi-annual company meeting held at HQ in Culver City, CA and we have excit...
Proactive Update Around the Health of your Signal Sciences Deployment
Signal Sciences Agent Monitoring In your efforts to defend your network and applications, deploying ...
Capturing Request Logs From Signal Sciences
Logs are important. We need them to investigate, monitor, and analyze. In cybersecurity we have many...
What the DevSecOps 2018 Survey Results Really Mean for Developers and Security
The 2018 DevSecOps Community Report is out and for those following the growth of DevOps and it’s sub...
Finding More Bugs Won’t Fix AppSec
In the 2018 Verizon Data Breach Investigations Report (DBIR), web applications were the number one s...
Demand More From Your Web Application Firewall
Photo by Kristina Flour on Unsplash I want to let you in on a little secret. About a year ago I had ...
Oops, I WAFed my Cache
It’s annoying when we use acronyms as verbs, isn’t it? I can change, maybe. JIRA me and I will get...
The Importance of Unified Application Security for Your Multi-cloud Strategy
A word from the product marketing and alliances team today!
Three Ways Legacy WAFs Fail
Ah, the WAF. You might know it by its street name: the web application firewall. It’s a long standin...
The Trending Target of Crypto Miners: Your Web Application
At the beginning of every year, the media covering cyber security is hot on predictions for the comi...
DevOps (and DevSecOps) Predictions for 2018
This article originally appeared on devops.com, written by Signal Sciences' James Wickett. [Read an ...
DevOps and Security in Practice at Chef – A Case Study
Chef’s mission is to help transformative companies become fast, efficient, and innovative software-d...
Embedding Web Application Security Into Retail DevOps – A Case Study
According to the 2017 Verizon Data Breach Report, the Retail and Accommodation industries combined a...
Signal Sciences WPP Provides the Broadest Language Support; Adds New Language to RASP Module
Application security needs to work with developers – or get left behind. To facilitate this alignm...
RASP Value Is Security Coverage
As an former engineer, I am biased towards getting excited around toys that blink, light up, and are...
What Can We Learn from the Equifax Breach?
Here we go again. Another massive data breach has exposesd extremely sensitive personal information,...
Securing Microservices and APIs with NGINX and Signal Sciences
A shift is happening in the tech industry: monolithic web applications are being decomposed into mic...
Starting the Avalanche: Application DoS In Microservice Architectures
This upcoming Modern Security Episode will introduce you to one of the most devastating ways to caus...
Detect and Defend Account Takeovers
The storyline is a familiar one — millions of accounts compromised, data leaked to the internet, sol...