Tagged articles

defense in depth

9 articles · Page 1 of 1

Oct 15, 2026 · Information Security

System Attack-Defense Architecture: Multi-Layer Security Patterns from CAPTCHA to Replay Prevention

This chapter from Yin Hongliang's Architecture Fundamentals details attack models like SMS abuse, brute force, and replay attacks, then explains layered defenses including risk-based CAPTCHA, distributed verification with one-time credentials, idempotency keys, signature validation, and multi-dimensional rate limiting with circuit breakers.

CAPTCHAIdempotencydefense in depth

0 likes · 9 min read

System Attack-Defense Architecture: Multi-Layer Security Patterns from CAPTCHA to Replay Prevention

Ops Development & AI Practice

Sep 18, 2026 · Information Security

Full-Stack Production Security: P1-P4 Priority Defense-in-Depth Implementation Guide

This article presents a comprehensive defense-in-depth matrix for production security across infrastructure, backend, and frontend layers, prioritizing controls from P1 (must-have survival basics like zero trust, MFA, secrets management) to P4 (edge-case hardening), with a three-phase rollout roadmap and anti-pattern warnings.

CSPOWASP Top 10P1-P4 priority

0 likes · 35 min read

Full-Stack Production Security: P1-P4 Priority Defense-in-Depth Implementation Guide

Java Tech Workshop

Sep 17, 2026 · Backend Development

Spring Boot 4.1 InetAddressFilter: Source-Level SSRF Protection Against Internal IPs & Cloud Metadata

This article dissects Spring Boot 4.1's built-in InetAddressFilter, showing how a single @Bean declaration blocks SSRF attacks by validating resolved IPs against private, loopback, link-local (including 169.254.169.254 cloud metadata), and multicast ranges before TCP connections are made, with automatic integration across RestClient, RestTemplate, and WebClient.

HTTP Client SecurityInetAddressFilterSSRF protection

0 likes · 19 min read

Spring Boot 4.1 InetAddressFilter: Source-Level SSRF Protection Against Internal IPs & Cloud Metadata

YiSu Grain

Jul 28, 2026 · Information Security

Security Architecture: Answer These Three Core Questions Before Picking Tools

Using an internet‑hospital example, the article explains that a solid security architecture must first identify what assets to protect (CIA), then define who can do what (AAA, least‑privilege and separation of duties), and finally plan how to respond when a defense line fails with zones, defense‑in‑depth, zero‑trust and the WPDRRC process.

AAACIADMZ

0 likes · 19 min read

Security Architecture: Answer These Three Core Questions Before Picking Tools

Su San Talks Tech

May 6, 2026 · Information Security

What Is Prompt Injection? Attack Vectors and Defense Strategies

The article explains that Prompt injection is a new LLM security threat where attackers blur the line between instruction and data, outlines direct and indirect injection techniques—including command overriding, role‑play jailbreaks, encoding obfuscation, and multi‑turn attacks—and proposes a defense‑in‑depth framework with input filtering, prompt design, output validation, least‑privilege architecture, and specialized safeguards for RAG and agent scenarios.

AI safetyAgentLLM security

0 likes · 15 min read

What Is Prompt Injection? Attack Vectors and Defense Strategies

IT Architects Alliance

Apr 9, 2026 · Information Security

Why 68% of Kubernetes Clusters Expose Cloud Credentials and How to Fix the Top 3 Risks

A recent study reveals that over two‑thirds of Kubernetes clusters contain critical misconfigurations that let attackers escape containers, steal cloud credentials, and hijack entire cloud accounts within minutes, and the article outlines the three most dangerous flaws, real‑world attack paths, and concrete mitigation steps.

KubernetesRBACcontainer escape

0 likes · 8 min read

Why 68% of Kubernetes Clusters Expose Cloud Credentials and How to Fix the Top 3 Risks

Black & White Path

Mar 25, 2026 · Information Security

How Interlock Ransomware Exploits Cisco FMC Zero‑Day CVE‑2026‑20131 for Root Access

Amazon's threat‑intel team revealed that the Interlock ransomware group has been leveraging Cisco Firepower Management Center's CVE‑2026‑20131 zero‑day—an insecure deserialization flaw that grants unauthenticated root access—since January 2026, exposing a detailed attack chain, toolset, attribution clues, impact assessment, and defensive recommendations.

CVE-2026-20131Cisco FMCInterlock ransomware

0 likes · 12 min read

How Interlock Ransomware Exploits Cisco FMC Zero‑Day CVE‑2026‑20131 for Root Access

Volcano Engine Developer Services

Aug 27, 2025 · Information Security

How Volcano Engine Secures MCP OAuth: Multi‑Layer Defense Against Token Theft

This article examines the OAuth security challenges in Volcano Engine's Model Context Protocol (MCP) ecosystem and outlines a comprehensive, three‑stage defense strategy—including pre‑authorization double confirmation, token identity isolation, and API‑level permission controls—to protect user assets and data.

MCPOAuthaccess token

0 likes · 13 min read

How Volcano Engine Secures MCP OAuth: Multi‑Layer Defense Against Token Theft

ITFLY8 Architecture Home

Sep 23, 2020 · Information Security

Mastering Security Architecture Reviews: Principles, Models, and Practical Steps

This article explains how to conduct comprehensive security architecture reviews by covering fundamental design principles, the three pillars of security controls, a practical review model, and detailed guidance on threat modeling, asset identification, and mitigation strategies for modern applications.

Security reviewdefense in depthleast-privilege

0 likes · 24 min read

Mastering Security Architecture Reviews: Principles, Models, and Practical Steps