Blog Listing: Security

Protecting websites against SQL injections and other security attacks has never been easier. In this blog post, I'll demonstrate a workflow that allows to protect against an SQL injection attack by configuring a firewall at the Edge. See the full demo at the end of this post.  For the origin, I used a PHP web server called DVWA (available in...

If you are using the alerting functionality in Akamai Security Monitor, this post will show you how to replicate them in Web Security Analytics. Our Web Security Analytics tool enables you to create alerts so you can stay informed about notable events as well as perform incident response, analysis, and tuning for your Akamai cloud security products.  For more background,...

A microservices architecture approach to software development is predicted to account for 80% of application development on cloud platforms by the year 2021 according to the IDC.  Microservices promise greater stability by separating services into separate functions. This allows for more fine-grained control. The key principle is to break down the system into functional components that are small enough to...

I wanted to share a video of a talk I gave at a recent LinkedIn Performance Engineering Meetup. In this talk—which builds on Akamai CEO Tom Leighton's keynote at a recent conference—I discuss the "capacity imbalance" on the Internet and some of the things you can do to ensure your sites and apps will be always fast and secure even...

Akamai’s Web Application Protector (WAP) — which is designed to help you easily safeguard your web assets from DDoS and web application attacks — is getting a range of new enhancements which are beginning to roll out right now, and I wanted to give you a quick overview of the areas where you'll find these improvements (click to jump to...

In 2018, we introduced Akamai’s Web Security Analytics tool (part of Akamai Security Center), which provides access to 31 days of security event data with flexible filtering, request samples, and the ability to export to CSV/JSON formats for offline analysis. One piece of feedback we’ve heard since then is the need for alerting capabilities. Some of you may familiar with...

This blog post is a follow-up to our recent post, “Announcing Upgraded and More Secure Prolexic Attack Reports,” and here we’ll take a deeper dive into one aspect of that announcement. Namely, we’ll explain in greater detail the two new categories of advanced forensics data in Prolexic attack reports: packet capture (PCAP) and top Source IPs (SIPs). Background After a...

No matter what your business is, staying on top of security events and trends is always a priority for developers, admins, and architects. In order to give you a new level of continuous insight into this area, we’re enhancing four of Akamai’s flagship security products: Kona Site Defender, Web Application Protector, Bot Manager, and Client Reputation. By July 2019, these...

One of our primary goals when fighting an attack for our Prolexic customers is to share as much attack information as possible in a quick and secure manner. This process occurs with close coordination between Akamai’s Security Operations Command Center (SOCC) and customers by maintaining runbooks, communicating via various channels, and sending post-action attack reports. These attack reports are delivered...

We’re happy to announce that we’ve just completed the fourth and final phase of our UX upgrades in the Akamai Security Configuration application (see the four phases listed here). This latest version streamlines the process for developers and admins, reduces time to complete tasks, makes protection more complete, and sets a strong foundation for Akamai to add new capabilities for...