Security
Page 12
-
Web Application Firewall (WAF) Best Practices
Liam Mayron
Following WAF best practices is imperative to keep your business and customers secure. Learn about new regulations and security tips.
Security -
Fastly to Acquire Signal Science for Security at Scale | Fastly
Joshua Bixby
Security has always been a part of Fastly’s DNA, not just within products, but in our vision of trust and safety as a modern platform. Today, we are pleased to announce that we have announced our intent to acquire Signal Sciences.
Company newsSecurity -
Hard-earned insights from a pair of secure DevOps pros
Liam Mayron
Fastly CISO Mike Johnson and Brave Software Senior DevOps Engineer Ben Kero share their practical advice for cementing more holistic security practices within your CI/CD pipeline.
DevOps+ 2 more -
Cloud Security for Developers
Stephen Kiel
If you’re evaluating web application security tools exclusively for their security requirements, you may be missing one of the most essential opportunities to successfully grow your secure DevOps culture: developer-centricity.
SecurityDevOps -
Fastly’s security DNA: a look at our culture of safety, privacy, and trust
Dana Wolf
Fastly's heritage of security runs deep — far beyond our portfolio of web application and API security products. Our philosophy of developer empowerment, focus on community, and values-driven culture each contribute to our security DNA in an important way. And we'd like to tell you how.
Security+ 2 more -
TLS 1.3 is faster, more robust, and now available
Sudhir Patamsetti
TLS 1.3 is now available for Fastly customers. The newest version of the TLS protocol, TLS 1.3 is designed to improve the performance and security of traffic served over HTTPS.
SecurityPerformance -
Why Compute does not yet support JavaScript
Sean Leach
Building our own compiler toolchain allows Compute to be both performant and secure. It also means we have to bring developers’ most-loved language into the fold in the right way.
Performance+ 3 more -
WAF & logging integrations added | Fastly
Mandy Sparber, Patrick Francois
Using integrations with BigQuery and Looker, we’ve created 15 chart templates that help you effectively monitor security events on your sites and applications, in real time.
SecurityObservability -
Three ways TLS 1.3 protects origin names
Patrick McManus
The newest version of Transport Layer Security, TLS 1.3, is faster, more robust, and more responsive than ever before. Explore three ways it will help HTTPS protect origin names for improved confidentiality.
Security+ 2 more -
5 tips for creating a secure DevOps culture
Kevin Rollinson
Integrating security into your DevOps cycle isn’t something that happens overnight. Here are five tips for building a culture in which secure DevOps can thrive, enabling your team to build secure apps quickly.
Culture+ 2 more -
Preventing Server Side Request Forgery (SSRF)
The Fastly Collective
Learn about the technical details of SSRF, how it was utilized in the Capital One breach, why it’s so critical to understand for today’s cloud-hosted web apps, and how organizations can protect their web applications and APIs from such attacks.
Security -
TLS with Fastly is now easier and more flexible
Blake Dournaee
Fastly now offers two new TLS services for the trust, flexibility, and scalability customers need to bring the best of the internet to life.
SecurityProduct -
Protecting WebSocket Protocol Apps and APIs with Fastly
The Fastly Collective
The 4.2 release of the Fastly agent introduces WebSocket traffic inspection, enabling customers to extend the coverage of applications, APIs, and microservices protected by Fastly’s Next-Gen WAF to apps and services that utilize the WebSockets protocol.
Security -
Prevent attacks with proof of work | Fastly
Andrew Betts
With attackers using publicly available lists of compromised passwords in an attempt to steal accounts, proof of work is a good way to slow the attackers down.
Security -
Protecting Financial Applications at Scale
The Fastly Collective
Security and development teams have a responsibility to secure customer data at the web application layer and stop attackers and Fastly's Next-Gen WAF can help.
Security -
Surfacing Key Indicators of Account Takeovers
The Fastly Collective
This post focuses on the key authentication events that financial services organizations should monitor to defend against account takeovers. We’ll also illustrate how utilizing a threshold-based approach enables organizations to identify irregular request patterns to spot fraudulent authentication and account activity.
Security -
Listening to Web Attacks Remixed!
The Fastly Collective
Sigsci-sounds monitor attack and anomaly data and will play a sound for each type of attack or anomaly.
Security -
Introducing Platform TLS and Subscriber Provided Prefix
Courtney Nash
Today we’re announcing two new offerings on the Fastly platform: Platform TLS and Subscriber Provided Prefix. Both empower companies to provide fast, secure web experiences to their customers and end-users, while reducing the workload on their own internal teams. Large companies, such as those offering mass hosting or managing multi-brand portfolios, can now quickly and easily manage hundreds of thousands of certificates in bulk.
ProductSecurity -
Fastly's Response to SegmentSmack
Jana Iyengar, Ryan Landry, + 1 more
A remotely exploitable denial-of-service (DoS) attack against the Linux kernel, called SegmentSmack, was made public on August 6th, 2018 as CVE-2018-5390. Fastly was made aware of this vulnerability prior to that date through a responsible disclosure. As part of our initial investigation, Fastly discovered a candidate patch proposed by Eric Dumazet from Google to address this vulnerability. We discussed the vulnerability and the patch with Eric, reproduced the attack, validated the patch as a fix, and estimated the impact of the vulnerability to our infrastructure. We immediately deployed temporary mitigations where we were most vulnerable, while simultaneously preparing and rolling out a patched kernel to our fleet.
SecurityEngineering -
Introducing Quick Value Packages
Courtney Nash
Keeping your digital presence continuously tuned, optimized, and secure to align with changing business and technical requirements can be time consuming. That’s why we’ve put together our Quick Value Packages — a collection of expert consulting services focused on performance, analytics, and security. Each one allows you to tap into Fastly’s expertise to keep up with the ongoing change and complexity of modern businesses — all while freeing up your IT and engineering resources. You’ll deliver quick wins and delight your teams, enabling you to focus on driving your business forward.
Performance+ 2 more
