The article explains why security incidents are far from rare, defines the security architect role, outlines core responsibilities, design principles, essential tools, and career paths, and emphasizes the importance of security architecture in protecting data and meeting compliance in the digital age.
Two open‑source projects—BabelDOC, a Python‑based PDF translator that retains original formatting using AI models, and OneAIFW, a Zig‑and‑Rust local AI firewall that anonymizes sensitive data before LLM queries—offer practical, privacy‑preserving solutions for researchers and developers.
GDPR, the EU’s General Data Protection Regulation effective since May 2018, imposes strict data‑handling rules worldwide, outlining seven core principles, eight data‑subject rights, mandatory legal bases, DPO appointments, breach notifications, privacy‑by‑design, record‑keeping, cross‑border transfer limits, hefty fines, and its global influence on similar laws.
Druva’s multi‑agent AI assistant, built on Amazon Bedrock AgentCore, lets users resolve up to 90% of routine data‑protection tasks via natural‑language chat, shrinking backup‑failure troubleshooting from hours to minutes and delivering a 70% overall efficiency gain, backed by detailed performance evaluations.
AI applications rely on vector embeddings for search and recommendation, but these rich vectors expose new security and privacy threats; this article explains the main risks, attack methods, and mature MySQL strategies—including secure storage, access control, encryption, auditing, and compliance—to protect vector data.
Designing a medical data platform that meets both GDPR and HIPAA requires embedding compliance into the architecture from the start, using a five-layered security model that covers network perimeter, identity, data processing, storage, and audit, with key management, encryption, and policy-as-code automation.
A disastrous rm -rf command erased 2.3 TB of production MySQL data, but a meticulously designed multi‑layer backup strategy—including logical, physical, real‑time, and cloud backups—enabled a 99.4% data recovery within 72 hours, highlighting essential lessons and best‑practice guidelines for reliable data protection.
This article explains data masking (data desensitization), its importance for privacy and compliance, outlines the four implementation stages, compares common masking techniques, and discusses the challenges and future directions for secure data handling in development and testing.
This guide explains how to assemble a cost‑effective, highly customizable data loss prevention platform using open‑source tools for endpoint monitoring, network traffic inspection, centralized analysis, and data discovery, while highlighting the required integration steps and the trade‑offs compared with commercial solutions.
This document outlines the background, scope, key definitions, and strict data security red lines that all employees must adhere to, including prohibitions on bypassing security measures, unauthorized data use, external disclosures, cross‑border transfers, and requirements for handling sensitive information.
SecretFlow is an open‑source privacy‑computing framework that lets multiple parties perform encrypted data analysis and AI model training without exposing raw data, offering unified MPC, federated learning and differential privacy features, with step‑by‑step Docker installation, Python examples, and a modular architecture for secure multi‑party computation.
This guide explains how Alibaba Cloud ACK Backup Center enables data protection, backup, and cross‑cluster migration of Kubernetes Persistent Volumes by leveraging the Data Protection feature, illustrating configuration steps, backup and restore workflows, and practical YAML examples.
This guide explains how Alibaba Cloud ACK’s Backup Center protects Kubernetes storage volumes, walks through creating backup plans with the Data Protection feature, demonstrates a NAS‑to‑Cloud‑Disk migration example, and details the step‑by‑step backup and restore procedures including YAML definitions and snapshot handling.
This article provides a comprehensive technical overview of RAID storage systems, covering fault tolerance concepts, consistency verification, hot spare and emergency backup mechanisms, reconstruction processes, read/write policies, power protection, disk striping, mirroring, external configurations, energy-saving features, and JBOD support, while explaining their practical implications and configuration guidelines.
This article provides a detailed explanation of cloud disaster recovery and cloud backup, covering their definitions, primary application scenarios, reference architectures, and essential technologies such as incremental backup, deduplication, multi‑tenant management, and data‑trust assurance, illustrated with diagrams and practical examples.
This guide outlines a complete security strategy for SaaS startups, covering external threats such as network attacks and data leaks, as well as internal risks like access control, host protection, code safety, log management, and third‑party integration, providing practical solutions and best‑practice recommendations.
This article explains backend web security concepts, detailing logical threats such as CSRF and CORS, their mechanisms, and protection strategies, and then discusses data security measures including access control, encryption, backups, monitoring, and software updates to safeguard web applications.
This article outlines the national‑standard‑based methodology for classifying and grading data, detailing industry‑specific processes, core and important data identification criteria, general data handling, and a privacy‑focused governance framework that enables organizations to protect sensitive information effectively.
This guide explains why accidental database deletion is a critical risk, outlines permission and audit measures, and provides detailed MySQL and file backup solutions—including encryption, multi‑site storage, cron scheduling, and ready‑to‑run Bash scripts—to ensure data safety and system stability.
The article examines why encrypted sensitive fields such as passwords, phone numbers, and bank details need special handling, categorises three families of fuzzy‑search solutions for encrypted data, evaluates their security, performance and storage costs, and recommends a balanced conventional method for production use.
The article defines user assets, explains why protecting them is vital for SaaS companies, and outlines organizational, procedural, technical, and emergency-response measures—plus common challenges—to help enterprises build comprehensive user asset security programs.
This article presents an in‑depth overview of ByteDance's EB‑scale HDFS, covering its new features, multi‑datacenter architecture, tiered storage implementation, data management services, capacity and fault‑tolerance strategies, as well as practical data‑protection mechanisms and related Q&A.
This article explains the core components and operation of SSDs—including controllers, NAND flash, block and page structures, program/erase cycles, garbage collection, wear‑leveling strategies, bad‑block handling, data‑redundancy mechanisms, namespace concepts, over‑provisioning, and key reliability metrics—providing a comprehensive technical overview for storage engineers.
This article explains disk fault tolerance mechanisms, detailing how RAID levels (1, 5, 6, 10, 50, 60) provide redundancy, the concepts of consistency checking, hot‑spare and emergency‑spare, rebuild processes, read/write policies, power‑loss protection, striping, mirroring, external configurations, energy‑saving, and JBOD functionality.
This article explains RAID fault tolerance mechanisms—including redundancy levels of RAID 1,5,6,10,50,60—covers consistency checks, hot‑spare and emergency backup, data reconstruction, read/write policies, power‑loss protection, striping, mirroring, foreign configurations, energy‑saving and JBOD, providing a comprehensive guide for storage administrators.
This article explains RAID fault tolerance, consistency checks, hot‑spare and emergency backup, reconstruction, read/write policies, power‑loss protection, striping, mirroring, external configuration, power‑saving and JBOD features, showing how RAID controllers maintain data integrity and system availability.
This article explains PHP's built‑in encryption functions—including OpenSSL encryption/decryption, hashing, and password handling—shows how to generate keys, encrypt and decrypt data, and provides best‑practice tips for securely protecting sensitive information in PHP applications.
This article examines the expanded scope, updated standards, and practical workflow of security risk assessment in today's regulatory environment, offering detailed guidance on assessment criteria, target objects, methodologies, organizational steps, and decision‑making for effective risk management.
Didi hardened its massive Elasticsearch deployment—spanning 66 clusters and thousands of nodes—by adding a custom security plugin that authenticates requests at the cluster level, implementing a one‑click toggle and staged rolling upgrades, ultimately enabling authentication across all clusters and dramatically reducing data‑leak risk.
This article provides a thorough introduction to RAID technology, explaining its definition, various software and hardware implementations, their advantages and disadvantages, and practical guidance for selecting the most suitable RAID solution for different storage scenarios.
The article compares three‑replica and dual‑RAID distributed storage designs, detailing their architectures, bandwidth and latency impacts, failure isolation, “slow‑disk” issues, and overall performance, stability, and reliability advantages of dual‑RAID for modern cloud and hyper‑converged environments.
Storage system reliability depends on both hardware and software availability and on preserving data integrity against media degradation, bit flips, external corruption, and firmware bugs, while techniques such as parity/ECC/CRC verification, RAID levels, snapshot methods, backups, continuous data protection, and specialized mechanisms like WAFL checksums and flash‑level error recovery collectively mitigate these risks.
Regular data backup is essential for both servers and personal computers, and this article reviews eight of the best Linux backup applications—ranging from enterprise‑grade tools like Bacula and Amanda to user‑friendly options such as Déjà Dup and Timeshift—along with installation commands and key features.
The National Internet Information Office's revised Internet Comment Service Management Regulations, effective December 15, 2022, mandate real‑name authentication, user tiering, blacklist of serious defaulters, stringent personal data protection, pre‑review of news comments, and comprehensive security measures for online comment platforms.
This guide explains what RAID is, its role in server storage, compares common RAID levels (0, 1, 5, 6, 10) in terms of fault tolerance, performance, and capacity, and offers recommendations for selecting the most suitable RAID configuration based on data safety, speed, and cost considerations.
A Dutch employee was awarded €75,000 (≈ ¥520,000) after a Dutch court ruled that his dismissal for refusing to keep his webcam on during remote work violated his privacy rights, highlighting legal limits on employer surveillance and prompting broader debate on remote‑work monitoring practices.
This article explains the three main backup methods—full, incremental, and differential—detailing their processes, advantages, disadvantages, and suitable use cases for organizations of different sizes, helping readers choose the most appropriate backup strategy for their business needs.
This article reviews Ant Group's award‑winning mPaaS mobile security solution, detailing the current mobile app security landscape, regulatory pressures, and the four‑layer full‑chain protection architecture—including data security, privacy control, biometric authentication, and app hardening—along with practical compliance and risk‑mitigation practices.
Airbnb’s Data Protection Platform (DPP) combines automated discovery, classification, encryption and privacy‑orchestration services—Inspekt, Angmar, Cipher, Obliviate, Minister, and the Madoka metadata system—to continuously inventory petabyte‑scale MySQL, Hive and S3 assets, track ownership and security attributes, and enforce GDPR, PIPL and CCPA compliance.
This article provides a comprehensive guide to disaster recovery, covering its definition, the distinction between backup and DR, various protection strategies, measurement metrics such as RPO and RTO, and practical implementation methods across storage, cloud, and network layers.
The article explains four primary backup methods—Normal (full), Copy, Differential, and Incremental—detailing their processes, advantages, and drawbacks, and helps readers decide which strategy best balances storage space, recovery speed, and data protection needs.
Since the pandemic forced remote work, organizations must protect growing data across hybrid teams, and the article argues that open-source databases such as PostgreSQL offer stronger, more adaptable security than legacy closed-source systems by enabling rapid patching, community scrutiny, and cost-effective protection.
This article explains what disaster recovery is, distinguishes it from backup, outlines classification types, compares their core differences, and details four DR maturity levels with their advantages and drawbacks to help organizations build resilient data protection strategies.
This article explains what disaster recovery is, how it differs from backup, outlines the various classifications of disaster recovery and backup, and details the six practical differences and four backup levels that organizations should consider to ensure business continuity and data protection.
This article outlines five best‑practice steps—including considering cluster architecture, planning recovery, simplifying operations, ensuring security, and leveraging Kubernetes portability—to help organizations reliably back up applications and data in Kubernetes environments.
The article exposes how the promise of big‑data convenience masks rampant privacy violations—from celebrity photo leaks and app data sales to weak legal penalties—illustrating that ordinary users’ personal information has become a cheap commodity with little protection.
GitHub announced the removal of unnecessary cookies, reflecting GDPR-driven privacy shifts and showing how modern web platforms can reduce data collection while still tracking essential performance metrics without third‑party trackers.
This article explains the principles and differences of file‑level and block‑level backup, remote file copy, remote volume imaging, snapshot mechanisms (including CoFW and RoFW), clone techniques, and various backup destinations, paths, and strategies used to ensure data reliability and redundancy.
This article explains the fundamentals and classifications of data backup technologies—including file‑level and block‑level protection, remote file copy, remote volume imaging, snapshot mechanisms, CoFW vs RoFW strategies, and volume clone methods—while also covering backup destinations, paths, and common backup strategies.
This article outlines twelve essential cybersecurity best practices for 2019, covering biometric security, tiered policies, risk‑based approaches, data backup, IoT protection, multi‑factor authentication, password management, least‑privilege principles, privileged‑user monitoring, third‑party access control, phishing defense, and employee awareness to safeguard sensitive data.
This article explains the background, principles, key concepts, workflow, and step‑by‑step deployment of Kerberos authentication on a Cloudera CDH big‑data cluster to protect sensitive medical data, and discusses its reliability and best‑practice configurations.
The article analyzes the growing limitations of tape backup, outlines a step‑by‑step migration to disk‑based backup using deduplication, compression and modern storage technologies, and explains how this transition improves reliability, cost efficiency and recovery speed for enterprises.
A Cloud Access Security Broker (CASB) sits between cloud service consumers and providers to enforce security, compliance, and governance policies, offering visibility, data protection, threat detection, and control over shadow IT, with various deployment modes and integration options for modern cloud environments.
This article provides a comprehensive overview of backup technologies, comparing Host, LAN, LAN-free, Server-free, and Server-less methods, reviews major backup software from EMC, Symantec, Commvault, and IBM, and explains NDMP protocols and NAS backup architectures.
This article provides a comprehensive overview of backup technologies, describing the evolution of backup architectures such as Host, LAN, LAN‑free, Server‑free, and Server‑less, and analyzes the features, advantages, and drawbacks of leading enterprise backup software solutions.
The article examines a 2019 bank app breach where a young hacker used packet capture, fake ID and replay attacks to create fraudulent accounts, then discusses comprehensive client‑side security measures—including Alipay's multi‑layer protection, AI‑driven verification, and mPaaS lifecycle hardening—to safeguard mobile applications.
This article examines the key differences between Commvault and Veritas NetBackup, evaluating their features, cloud integration, endpoint support, cost, and suitability for small versus large enterprises to help organizations choose the most appropriate backup and disaster recovery solution.
China’s mandatory Cybersecurity Graded Protection System 2.0, effective Dec 1 2019, classifies information systems into five security levels, imposes legally enforceable technical and management controls—including encryption, trusted computing, and cloud requirements—and outlines a five‑step assessment, registration, remediation, and supervision process for enterprises to achieve compliance quickly.
A recent test showed that a printed photo can bypass facial‑recognition parcel lockers, sparking concerns about privacy, data security, and the reliability of AI‑driven biometric systems as they become more widespread.
This article outlines twelve essential cybersecurity practices for 2019, covering biometric authentication, tiered security policies, risk‑based approaches, regular backups, IoT security, multi‑factor authentication, password management, least‑privilege principles, privileged‑user monitoring, third‑party access control, phishing awareness, and employee training.
The article analyzes the evolution of data protection—from manual copies and scripts to snapshots and Continuous Data Protection (CDP)—explaining CDP's technical principles, implementation models, advantages over traditional backup, and how Copy Data Management (CDM) complements modern storage strategies in large‑scale enterprises.
Snapshot technology creates point‑in‑time copies of files, directories or volumes, addressing common backup issues such as large data volumes, write‑in‑progress files, performance impact, and consistency, while offering various implementations—from file‑system and LVM to NAS, hypervisors, and databases—each with distinct advantages and trade‑offs.
Discover a concise guide to essential backup solutions—including Git version control, Rsync command-line syncing, Dropbox cloud storage, and macOS Time Machine—explaining their core features, practical usage, and how they collectively safeguard your files, code, and system data.
The draft "Internet Personal Information Security Protection Guideline" issued by China's Ministry of Public Security outlines comprehensive management mechanisms, technical safeguards, and business processes to help internet enterprises protect personal data throughout its lifecycle, and invites public feedback via the national security platform.
This article explains data protection concepts—including file‑level and block‑level backup, remote file copy and remote volume imaging, snapshot mechanisms such as CoFW and RoFW, and clone technologies—while discussing their advantages, drawbacks, and practical backup architectures.
This article provides a comprehensive overview of snapshot technology, explaining its creation process, various implementations across file systems, LVM, NAS, disk arrays, virtualization, and databases, and detailing mechanisms like COW, ROW, incremental and continuous protection while addressing consistency challenges.
This article presents a comprehensive guide to operational security, covering essential habits, a layered technical architecture, access‑control strategies, CI/CD safeguards, DDoS mitigation, data protection, incident‑response procedures, and collaboration with IT, security, and network teams.
This article details how Dell EMC’s SC series storage, VPLEX and RecoverPoint were tested by E Enterprise Research Institute across multiple failure scenarios, demonstrating automatic failover, rapid point‑in‑time restores, flexible backup granularity and millisecond‑level recovery to ensure uninterrupted business operations.
Storage snapshots are point‑in‑time, fully usable copies of data that protect against loss, enable testing and analysis, and are implemented mainly via copy‑on‑write or redirect‑on‑write techniques, each with distinct performance and deletion trade‑offs, so selecting the optimal method depends on workload and business requirements.
This article explains GDPR's key principles, the Discover‑Defend‑Detect framework, and concrete database controls such as data identification, retention, pseudonymisation, encryption, access control, disaster recovery, and audit logging needed to achieve compliance.
This article compiles a series of detailed data backup resources, covering introductory concepts, backup software architectures, distributed indexing, key features like snapshots and deduplication, virtualization support, storage sizing, cloud optimization, and agent‑less solutions to help practitioners design reliable backup strategies.
This article provides a comprehensive overview of backup concepts, various backup architectures such as Host, LAN, LAN‑free, Server‑free and Server‑less, evaluates leading enterprise backup solutions, and analyzes key features like deduplication, NDMP support, OS compatibility and maintainability.
Google’s new security white paper reveals how its deeply integrated, principle‑driven architecture—spanning physical data‑center safeguards, mutual‑authenticated multi‑tenant services, pervasive encryption, and a comprehensive DevSecOps process—enables massive‑scale protection, but replicating this model demands substantial custom hardware, unified tooling, and large‑scale engineering expertise.
The article examines agentless backup technology, comparing its implementation in virtualized and physical environments, detailing supported interfaces, evaluating a real‑world Asigra Cloud Backup case, and discussing security risks, performance impacts, and when traditional agents remain necessary.
Smaug, now called Karbor, is an OpenStack project that standardizes data protection across heterogeneous virtualization platforms by offering unified APIs, plugin architecture, and workflow services to protect VMs, volumes, networks, and other resources with backup, replication, and migration capabilities.
This article examines how backup software ensures enterprise data reliability through media redundancy, server failover, load balancing, and both cold and high‑availability solutions for the management server, highlighting technologies such as GridStor, dual‑array clustering, and deduplication.
The article provides a comprehensive overview of various backup software networking models—including LAN Base, LAN Free, Server Free, NDMP, and the emerging Server‑Less approach—detailing their deployment options, performance impacts, and suitability for different data volumes and infrastructure requirements.
Ctrip has become the first Chinese online travel service to obtain ISO 27001 certification, demonstrating enhanced information security management for its financial and business‑travel divisions and reassuring users that their personal and payment data are protected throughout the booking process.
This guide explains why data backup is essential, outlines backup types (full, incremental, differential), compares MySQL backup methods (hot, warm, cold), evaluates physical vs logical approaches, reviews common tools like mysqldump, cp, tar, LVM snapshots, and xtrabackup, and offers strategies for choosing the right solution.
Web crawlers, especially AI‑driven ones, threaten site performance and data ownership, so this article reviews common anti‑scraping methods—from IP and header analysis to behavior detection—and reveals two unconventional defenses: data poisoning and a deposit‑based access model that penalize malicious bots.
This article explains XenServer's high‑performance virtualization features, OVF/OVA export capabilities, snapshot‑based backup methods, disaster‑recovery replication, XenCenter management console functions, integration with Microsoft System Center, and the open XenAPI that enables third‑party automation.
The article explores the essence of information security by comparing it to safeguarding personal money, detailing the four fundamental attributes—confidentiality, integrity, availability, and controllability—and illustrating how different conditions shape security needs, from personal to enterprise contexts.
