BestHub
Sign in
Tagged articles

audit logging

14 articles · Page 1 of 1
YiSu Grain
YiSu Grain
Aug 12, 2026 · Information Security

Day 54 – Attacks and Access Control: From “Who Are You?” to “Can This Action Be Performed?”

This article walks through the fundamentals of authentication, multi‑factor authentication, SSO, common attack vectors such as SQL injection, XSS, CSRF, DDoS, and Man‑in‑the‑Middle, explains DAC, MAC, RBAC, TBAC, OBAC, ABAC, Bell‑LaPadula, Biba, Clark‑Wilson and Chinese‑Wall models, and shows how to design a comprehensive audit log for an Internet‑based prescription system.

CSRFDDoSSQL injection
0 likes · 31 min read
Day 54 – Attacks and Access Control: From “Who Are You?” to “Can This Action Be Performed?”
LuTiao Programming
LuTiao Programming
Jul 12, 2026 · Backend Development

Stop Using GPT Just to Write Code—Turn Your Spring Boot Service into an AI‑Callable Tool

Java developers should move beyond using GPT for code generation and instead expose existing Spring Boot services as secure, auditable AI tools, covering permission checks, data desensitization, tool descriptions, system prompts, and comprehensive logging to safely integrate GPT into business workflows.

AI Tool CallingGPTJava Backend
0 likes · 17 min read
Stop Using GPT Just to Write Code—Turn Your Spring Boot Service into an AI‑Callable Tool
Coder Trainee
Coder Trainee
May 31, 2026 · Information Security

Spring Security + OAuth2 Part 5: Managing Clients and Production‑Ready Extensions

This article shows how to move OAuth2 client credentials out of source code into a database, add dynamic registration, multi‑tenant isolation, encrypted secret storage, login‑failure throttling, audit logging, a management REST API, and provides testing steps and common pitfalls.

Client ManagementDatabase PersistenceOAuth2
0 likes · 17 min read
Spring Security + OAuth2 Part 5: Managing Clients and Production‑Ready Extensions
LuTiao Programming
LuTiao Programming
Jan 18, 2026 · Backend Development

One-Line Config for Automatic Data Change Auditing with Spring Boot & MyBatis-Plus

The article presents a low‑intrusion, highly configurable data‑audit plugin for Spring Boot that leverages MyBatis‑Plus interceptors to automatically capture before‑and‑after snapshots of INSERT, UPDATE, and DELETE operations, offering extensible logging, masking, async handling, and monitoring for enterprise systems.

Interceptoraudit loggingbackend
0 likes · 10 min read
One-Line Config for Automatic Data Change Auditing with Spring Boot & MyBatis-Plus
Xiao Liu Lab
Xiao Liu Lab
Oct 29, 2025 · Information Security

Secure MySQL 8 in 30 Minutes with 6 Production‑Ready Scripts

Learn how to transform a vulnerable MySQL 8 instance into a militarized, audit‑ready database in just half an hour by applying six ready‑to‑run shell and SQL scripts that disable high‑risk accounts, enable enterprise audit logging, enforce SSL, prune privileges, rotate root passwords, and generate compliance reports.

AutomationMySQLSSL
0 likes · 7 min read
Secure MySQL 8 in 30 Minutes with 6 Production‑Ready Scripts
Raymond Ops
Raymond Ops
Aug 7, 2025 · Databases

How to Enable and Configure MariaDB Audit Logging Plugin

This guide walks you through verifying, installing, configuring, and activating the MariaDB server_audit plugin, including required ConfigMap edits, optional SQL commands, and a Kubernetes rollout to ensure comprehensive audit logging of connections, queries, and table events.

Database SecurityKubernetesMariaDB
0 likes · 4 min read
How to Enable and Configure MariaDB Audit Logging Plugin
Subtle Storm
Subtle Storm
Jun 21, 2025 · Information Security

Why Bastion Hosts Are Critical for Secure Operations and Auditing

The article explains how bastion hosts serve as a security gateway in IT operations, detailing their core functions such as unified authentication, fine‑grained access control, command filtering, comprehensive audit logging, and risk alerts, and compares them with simple jump servers across typical deployment scenarios.

access controlaudit loggingbastion host
0 likes · 10 min read
Why Bastion Hosts Are Critical for Secure Operations and Auditing
21CTO
21CTO
Aug 23, 2024 · Information Security

Why Do Companies Fail at Data Security? Common Pitfalls and Solutions

This article examines why many enterprises repeatedly suffer data breaches, highlighting common security flaws such as manual permission management, account sharing, lack of least‑privilege, insufficient environment isolation, weak audit logging, and offers practical recommendations to strengthen information security.

access controlaudit loggingdata security
0 likes · 14 min read
Why Do Companies Fail at Data Security? Common Pitfalls and Solutions
Bilibili Tech
Bilibili Tech
Apr 18, 2023 · Cloud Native

Kubernetes Audit Log Analysis for Container Security

The article explains how to enable Kubernetes audit logging and use its detailed fields—such as userAgent, responseStatus, requestURI, and object references—to detect CDK‑generated attacks and other threats like CVE‑2022‑3172, privilege escalation, and backdoor deployment, offering practical detection examples and security recommendations.

API ServerCDKKubernetes
0 likes · 15 min read
Kubernetes Audit Log Analysis for Container Security
dbaplus Community
dbaplus Community
Sep 25, 2017 · Information Security

How GDPR Shapes Data Management Practices and Database Security

This article explains GDPR's key principles, the Discover‑Defend‑Detect framework, and concrete database controls such as data identification, retention, pseudonymisation, encryption, access control, disaster recovery, and audit logging needed to achieve compliance.

GDPRaccess controlaudit logging
0 likes · 12 min read
How GDPR Shapes Data Management Practices and Database Security