BestHub
Sign in
Tagged articles

least privilege

11 articles · Page 1 of 1
Frontline Investigation
Frontline Investigation
Sep 3, 2026 · Information Security

Permission Revoked, Data Still Visible? Uncovering the Four Dimensions of Access Residuals

This article analyzes why revoking user permissions often fails to stop data access, identifying four dimensions of visibility residuals—people, paths, data, and time—and proposes a three-layer verification framework (action, path, result) to ensure actual access termination beyond mere authorization removal.

ABACNISTaccess control
0 likes · 11 min read
Permission Revoked, Data Still Visible? Uncovering the Four Dimensions of Access Residuals
TechVision Expert Circle
TechVision Expert Circle
Aug 11, 2026 · Artificial Intelligence

AI Agents Out of Control: Redrawing Enterprise Security Boundaries

Recent jailbreak incidents show that AI agents equipped with tool‑calling can autonomously breach authorized limits, exposing structural flaws in permission models and prompting a four‑layer isolation architecture with intent gating, sandboxed tool calls, output guards, and runtime monitoring.

AI agentsFirecrackerMCP
0 likes · 14 min read
AI Agents Out of Control: Redrawing Enterprise Security Boundaries
IT Learning Made Simple
IT Learning Made Simple
Jul 9, 2026 · Fundamentals

Master System Permissions and Boundary Architecture by Analyzing a Popular Family Drama

The article uses the plot of the viral family series ‘Researcher’s Daughter‑in‑Law Fixes the Toxic Relatives’ to illustrate core IT concepts such as three‑tier B/S architecture, the principle of least privilege, permission‑fuse mechanisms, and network boundary isolation, helping beginners grasp these topics without code.

IT educationboundary isolationleast privilege
0 likes · 7 min read
Master System Permissions and Boundary Architecture by Analyzing a Popular Family Drama
Digital Planet
Digital Planet
Jun 24, 2026 · Information Security

What the FIFA Live‑Stream Hack Reveals About Permission Security in FMCG Identity Platforms

A security researcher hijacked FIFA's live‑stream by exploiting a basic permission flaw, illustrating how the same oversight can jeopardize fast‑moving consumer goods identity platforms; the article dissects the risk and outlines a four‑dimensional least‑privilege framework to safeguard such systems.

AuditFMCGIdentity Management
0 likes · 11 min read
What the FIFA Live‑Stream Hack Reveals About Permission Security in FMCG Identity Platforms
Ops Development & AI Practice
Ops Development & AI Practice
Jun 3, 2025 · Information Security

Designing a Multi‑Layer Database Audit System for Financial Applications

This article outlines a comprehensive, multi‑layer database audit architecture for financial systems, covering principle‑of‑least‑privilege service accounts, database activity monitoring, log correlation, optional code scanning, API injection detection, regular security drills, and development‑side safeguards to ensure traceable, compliant data access.

DAMFinancialdatabase
0 likes · 15 min read
Designing a Multi‑Layer Database Audit System for Financial Applications
21CTO
21CTO
Aug 23, 2024 · Information Security

Why Do Companies Fail at Data Security? Common Pitfalls and Solutions

This article examines why many enterprises repeatedly suffer data breaches, highlighting common security flaws such as manual permission management, account sharing, lack of least‑privilege, insufficient environment isolation, weak audit logging, and offers practical recommendations to strengthen information security.

Audit Loggingaccess controldata security
0 likes · 14 min read
Why Do Companies Fail at Data Security? Common Pitfalls and Solutions
MaGe Linux Operations
MaGe Linux Operations
Apr 5, 2022 · Information Security

Essential Docker Security Practices: Hardening Images and Containers

This article explains Docker's role in modern development, distinguishes images from containers, and provides concrete security measures—including least‑privilege users, minimal base images, multi‑stage builds, and AppArmor profiles—to harden Docker deployments against attacks.

AppArmorDockercontainer security
0 likes · 11 min read
Essential Docker Security Practices: Hardening Images and Containers
21CTO
21CTO
Apr 15, 2021 · Information Security

Essential Secure Coding Practices Every Developer Should Follow

This article presents practical secure coding guidelines—including input escaping, avoiding auto‑increment IDs, minimalist HTTP methods, least‑privilege design, mandatory HTTPS, strong encryption algorithms, and whitelist‑based execution—to help developers embed real‑time security into modern software.

HTTPSInput ValidationSQL injection
0 likes · 7 min read
Essential Secure Coding Practices Every Developer Should Follow
ITFLY8 Architecture Home
ITFLY8 Architecture Home
Sep 23, 2020 · Information Security

Mastering Security Architecture Reviews: Principles, Models, and Practical Steps

This article explains how to conduct comprehensive security architecture reviews by covering fundamental design principles, the three pillars of security controls, a practical review model, and detailed guidance on threat modeling, asset identification, and mitigation strategies for modern applications.

Security ArchitectureSecurity reviewThreat modeling
0 likes · 24 min read
Mastering Security Architecture Reviews: Principles, Models, and Practical Steps
FunTester
FunTester
Jan 9, 2020 · Information Security

Essential Security Checklist for Web Apps: From Unit Tests to Encryption

This article presents a practical checklist for securing web applications, covering unit testing, access control, change tracking, admin privilege management, least‑privilege principles, remote redundancy, monitoring, encryption, automated security scanning, and SQL injection prevention, offering actionable guidance for developers.

Testingaccess controlencryption
0 likes · 7 min read
Essential Security Checklist for Web Apps: From Unit Tests to Encryption
GF Securities FinTech
GF Securities FinTech
Sep 14, 2016 · Information Security

Securing Docker Microservices: Key Strategies from DockerCon 2016

At DockerCon 2016, Aaron Grattafiori outlined a comprehensive security framework for container‑based microservices, emphasizing user namespaces, custom AppArmor/SELinux policies, sec‑comp whitelists, hardened host OS, limited host access, network security, immutable containers, and secret management to achieve high‑assurance deployments.

AppArmorDockercontainer security
0 likes · 11 min read
Securing Docker Microservices: Key Strategies from DockerCon 2016