JumpServer, an open‑source bastion host, lets you centrally manage SSH, RDP, databases and Kubernetes assets, enforce per‑user permissions, intercept high‑risk commands like rm ‑rf, record every session with video replay, and can be deployed on a fresh Linux server with just one curl command.
Using an internet‑hospital example, the article explains that a solid security architecture must first identify what assets to protect (CIA), then define who can do what (AAA, least‑privilege and separation of duties), and finally plan how to respond when a defense line fails with zones, defense‑in‑depth, zero‑trust and the WPDRRC process.
When a public server shows a flood of "Failed password" entries and rising SSH connections, this guide walks you through distinguishing brute‑force attempts from actual compromise, gathering immutable evidence, applying immediate network and host safeguards, hardening OpenSSH configuration, managing keys, deploying fail2ban, and verifying the hardened system without losing access.
This guide explains how to add MFA to a Spring Boot 3 application using password plus one‑time token authentication, covering the theory of MFA factors, required dependencies, API definitions, security configuration, token‑generation handling, custom login pages, and the complete verification flow with code snippets and screenshots.
The article explains why relying solely on username‑password authentication is risky, introduces multi‑factor authentication (MFA) as the only effective solution, and shows how Spring Boot 4.0’s @EnableMultiFactorAuthentication annotation together with Spring Security 7 lets developers implement MFA with just an annotation, automatic factor tracking, smart redirects, and minimal configuration.
This article explains how Spring Boot 4.0’s @EnableMultiFactorAuthentication annotation simplifies the implementation of password‑plus‑one‑time‑token multi‑factor authentication, providing step‑by‑step code examples, custom token services, endpoint‑level MFA configuration, and production‑grade considerations.
This guide explains how to secure FastAPI applications using OAuth2 with JWT, role‑based access control, refresh‑token workflows, multi‑factor authentication, and integration with external providers such as Auth0, Keycloak, and Firebase.
By leveraging Cognito’s Hosted UI and the OAuth2 Authorization Code Grant, a lightweight local helper launches a temporary web server, opens the browser for MFA login, exchanges the code for tokens, and feeds temporary AWS STS credentials into the AWS CLI via the credential_process feature, delivering a seamless, SSO‑like experience.
This guide shows how to replace limited IAM Identity Center access by creating a lightweight, MFA‑protected CLI login portal using AWS Cognito user pools and identity pools, generating temporary STS credentials and automating the process with a Python/Boto3 script.
This article reveals common security flaws in typical PHP authentication implementations—such as misconceptions about session safety, weak password storage, inadequate CSRF protection, missing rate limiting, and lack of multi‑factor authentication—and provides concrete best‑practice steps, including modern password hashing, strict session management, HTTPS enforcement, comprehensive CSRF defenses, intelligent rate limiting, MFA support, and regular security audits.
This article explains the concepts, importance, various forms, and practical implementation details of MFA and 2FA—including the Google Authenticator TOTP mechanism—while also discussing their limitations, costs, and future directions in modern identity security.
This article explains the essential components of user authentication architecture, covering its importance, core principles, registration, login, session management, popular protocols like OAuth, OpenID Connect, SAML, JWT, and critical security considerations for robust protection.
The article argues that traditional password complexity rules and periodic resets are outdated, advocating for longer passwords, the use of password managers and multi‑factor authentication, and limiting login attempts to improve security in modern, always‑connected systems.
This article explains how MySQL 8.0.27 adds multi‑factor authentication (MFA) via the new authentication_policy system variable, demonstrates configuring the variable, creating users with single or multiple authentication plugins, installing external plugins, and verifies MFA behavior with practical Docker‑based examples.
This article explains how microservice architecture introduces new security challenges and presents seven best‑practice recommendations—including using an API gateway, strong defense layers, DevSecOps, trusted encryption libraries, service‑level security, multi‑factor authentication, and dependency verification—to help protect microservice‑based applications.
Microservice architectures increase deployment flexibility but also expand the attack surface, so this article outlines seven essential security best practices—including using an API gateway, layered defenses, DevSecOps, trusted encryption libraries, service-level protection, multi-factor authentication, and dependency vulnerability scanning—to safeguard microservice-based applications.
This article explains the fundamental differences between authentication and authorization, outlines common methods such as single‑factor, two‑factor, and multi‑factor authentication, introduces JWT token generation, and showcases Casbin as a flexible access‑control framework for securing APIs.
This article outlines twelve essential cybersecurity practices for 2019, covering biometric authentication, tiered security policies, risk‑based approaches, regular backups, IoT security, multi‑factor authentication, password management, least‑privilege principles, privileged‑user monitoring, third‑party access control, phishing awareness, and employee training.
The April 2018 Ceph monthly report highlights LTTng tracing for RGW, SSL support for the beast frontend, MFA integration, a notrim option for rbd mapping, runtime lz4 and brotli compression, Zabbix PG metrics, asynchronous dashboard tasks, detailed operation tracking, osdmap pruning, and a new iostat manager plugin.
