Blog Listing: Security

A security information and event management solution (SIEM) is an important part of any DevSecOps strategy. Analyzing security events and creating visualizations and reports allows you to fine-tune the security for your infrastructure and bolster the security of your applications, APIs, data and endpoints. SIEM tools are often used to collect logs for origin servers, internal firewalls, or other sources...

In this blog, we will add user authentication to a simple PHP web application with Akamai Identity Cloud. The primary use case is user registration and log in or out from a simple PHP application. In this example, we will use the OpenID Connect (OIDC) Authorization Code flow built into Akamai Identity Cloud as illustrated below. You can complete the...

As online security professionals, we are always striving to improve website security. Security threats continue to evolve, requiring an online protection strategy that is robust and flexible. In this blog post, we’ll share an overview of a multi-layered web security approach with Akamai that addresses ever-changing online security challenges. Edge DNS | Before we review the security protections available from...

Protecting websites against SQL injections and other security attacks has never been easier. In this blog post, I'll demonstrate a workflow that allows to protect against an SQL injection attack by configuring a firewall at the Edge. See the full demo at the end of this post.  For the origin, I used a PHP web server called DVWA (available in...

If you are using the alerting functionality in Akamai Security Monitor, this post will show you how to replicate them in Web Security Analytics. Our Web Security Analytics tool enables you to create alerts so you can stay informed about notable events as well as perform incident response, analysis, and tuning for your Akamai cloud security products.  For more background,...

A microservices architecture approach to software development is predicted to account for 80% of application development on cloud platforms by the year 2021 according to the IDC.  Microservices promise greater stability by separating services into separate functions. This allows for more fine-grained control. The key principle is to break down the system into functional components that are small enough to...

I wanted to share a video of a talk I gave at a recent LinkedIn Performance Engineering Meetup. In this talk—which builds on Akamai CEO Tom Leighton's keynote at a recent conference—I discuss the "capacity imbalance" on the Internet and some of the things you can do to ensure your sites and apps will be always fast and secure even...

Akamai’s Web Application Protector (WAP) — which is designed to help you easily safeguard your web assets from DDoS and web application attacks — is getting a range of new enhancements which are beginning to roll out right now, and I wanted to give you a quick overview of the areas where you'll find these improvements (click to jump to...

In 2018, we introduced Akamai’s Web Security Analytics tool (part of Akamai Security Center), which provides access to 31 days of security event data with flexible filtering, request samples, and the ability to export to CSV/JSON formats for offline analysis. One piece of feedback we’ve heard since then is the need for alerting capabilities. Some of you may familiar with...

This blog post is a follow-up to our recent post, “Announcing Upgraded and More Secure Prolexic Attack Reports,” and here we’ll take a deeper dive into one aspect of that announcement. Namely, we’ll explain in greater detail the two new categories of advanced forensics data in Prolexic attack reports: packet capture (PCAP) and top Source IPs (SIPs). Background After a...