Blog Listing: Security

Managing security solutions as code is an important part of any DevSecOps strategy. In this blog, I will guide you on your path when it comes to everything you need to know to manage your Akamai Security solutions with the Akamai Developer toolbox.  This blog is designed for anyone who is interested in managing Akamai Security solutions through the use...

“Zero Trust is a network security model, based on a strict identity verification process. The framework dictates that only authenticated and authorized users and devices can access applications and data. At the same time, it protects those applications and users from advanced threats on the internet.” – Akamai Zero Trust Security Akamai’s Enterprise Application Access (EAA) is a unique offering...

Akamai Cloud Access Manager (CAM) is a new feature that will now be included as part of our delivery service. The CAM feature will help anyone who uses cloud origins more easily manage access keys in a simple and secure method.   CAM captures AWS and Google Cloud Platform (GCP) authentication keys and access IDs in a secure service for use...

This blog is part of a series that walks through user authentication using Akamai Identity Cloud in various languages.  In this blog, we will add user authentication to a simple ASP.NET web application with Akamai Identity Cloud. The primary use case is user registration and log in or out from a simple ASP.NET application. In this example, we will use...

A security information and event management solution (SIEM) is an important part of any DevSecOps strategy. Analyzing security events and creating visualizations and reports allows you to fine-tune the security for your infrastructure and bolster the security of your applications, APIs, data and endpoints. SIEM tools are often used to collect logs for origin servers, internal firewalls, or other sources...

In this blog, we will add user authentication to a simple PHP web application with Akamai Identity Cloud. The primary use case is user registration and log in or out from a simple PHP application. In this example, we will use the OpenID Connect (OIDC) Authorization Code flow built into Akamai Identity Cloud as illustrated below. You can complete the...

As online security professionals, we are always striving to improve website security. Security threats continue to evolve, requiring an online protection strategy that is robust and flexible. In this blog post, we’ll share an overview of a multi-layered web security approach with Akamai that addresses ever-changing online security challenges. Edge DNS | Before we review the security protections available from...

Protecting websites against SQL injections and other security attacks has never been easier. In this blog post, I'll demonstrate a workflow that allows to protect against an SQL injection attack by configuring a firewall at the Edge. See the full demo at the end of this post.  For the origin, I used a PHP web server called DVWA (available in...

If you are using the alerting functionality in Akamai Security Monitor, this post will show you how to replicate them in Web Security Analytics. Our Web Security Analytics tool enables you to create alerts so you can stay informed about notable events as well as perform incident response, analysis, and tuning for your Akamai cloud security products.  For more background,...

A microservices architecture approach to software development is predicted to account for 80% of application development on cloud platforms by the year 2021 according to the IDC.  Microservices promise greater stability by separating services into separate functions. This allows for more fine-grained control. The key principle is to break down the system into functional components that are small enough to...