Blog Listing: Security

Akamai Cloud Access Manager (CAM) is a new feature that will now be included as part of our delivery service. The CAM feature will help anyone who uses cloud origins more easily manage access keys in a simple and secure method.   CAM captures AWS and Google Cloud Platform (GCP) authentication keys and access IDs in a secure service for use...

This blog is part of a series that walks through user authentication using Akamai Identity Cloud in various languages.  In this blog, we will add user authentication to a simple ASP.NET web application with Akamai Identity Cloud. The primary use case is user registration and log in or out from a simple ASP.NET application. In this example, we will use...

A security information and event management solution (SIEM) is an important part of any DevSecOps strategy. Analyzing security events and creating visualizations and reports allows you to fine-tune the security for your infrastructure and bolster the security of your applications, APIs, data and endpoints. SIEM tools are often used to collect logs for origin servers, internal firewalls, or other sources...

In this blog, we will add user authentication to a simple PHP web application with Akamai Identity Cloud. The primary use case is user registration and log in or out from a simple PHP application. In this example, we will use the OpenID Connect (OIDC) Authorization Code flow built into Akamai Identity Cloud as illustrated below. You can complete the...

As online security professionals, we are always striving to improve website security. Security threats continue to evolve, requiring an online protection strategy that is robust and flexible. In this blog post, we’ll share an overview of a multi-layered web security approach with Akamai that addresses ever-changing online security challenges. Edge DNS | Before we review the security protections available from...

Protecting websites against SQL injections and other security attacks has never been easier. In this blog post, I'll demonstrate a workflow that allows to protect against an SQL injection attack by configuring a firewall at the Edge. See the full demo at the end of this post.  For the origin, I used a PHP web server called DVWA (available in...

If you are using the alerting functionality in Akamai Security Monitor, this post will show you how to replicate them in Web Security Analytics. Our Web Security Analytics tool enables you to create alerts so you can stay informed about notable events as well as perform incident response, analysis, and tuning for your Akamai cloud security products.  For more background,...

A microservices architecture approach to software development is predicted to account for 80% of application development on cloud platforms by the year 2021 according to the IDC.  Microservices promise greater stability by separating services into separate functions. This allows for more fine-grained control. The key principle is to break down the system into functional components that are small enough to...

I wanted to share a video of a talk I gave at a recent LinkedIn Performance Engineering Meetup. In this talk—which builds on Akamai CEO Tom Leighton's keynote at a recent conference—I discuss the "capacity imbalance" on the Internet and some of the things you can do to ensure your sites and apps will be always fast and secure even...

Akamai’s Web Application Protector (WAP) — which is designed to help you easily safeguard your web assets from DDoS and web application attacks — is getting a range of new enhancements which are beginning to roll out right now, and I wanted to give you a quick overview of the areas where you'll find these improvements (click to jump to...