Most companies today use some variation of the firewall or fortress model for perimeter security. This model assumes everything on the outside is dangerous and everything in the inside is safe and worked well when employees worked on desktop computers at the company HQ. Neal Mueller and Max Saltonstall offer an overview of Googles BeyondCorp, a new model for today's dispersed BYOD workforce.

Online safety has become a huge problem in the world of oversharing. Real-name policies, automatic geolocation tracking, and photo tagging increase user adoption rates, but these features can be quickly abused by bad actors. Danielle Leong explains how to apply a "consent filter" to product decisions to create a safer user experience and help protect your most vulnerable users from harm.

Matt Stine offers an overview of the three principles of cloud-native securityrotate user credentials frequently, so they are only useful for a short time; repave servers and applications from a known good state often; and repair vulnerable software as soon as updates are availableand explains how this approach helps you deal with the exponentially increasing volume and velocity of threats.

We are all building containers from base images with possibly questionable pre-built binaries every day. Why? We do not know what is in our own containers. Modern software is routinely assembled from …

The growing availability of dataalong with advances in fields such as data science and artificial intelligencehas profoundly changed businesses. Manuel Garca-Herranz explains how to leverage these advances for the most vulnerable, while making sure that the existing data divide does not increase the gap in inequality, and integrate these advances into the humanitarian and development systems.

NorthSec is one of the biggest on-location security contests (Capture The Flag) in the world. It's also one of the biggest deployments of LXC, albeit only for a weekend. It is unique not only because …

The more that we rely on data to train our models and inform our systems, the more that this data becomes a target for those seeking to manipulate algorithmic systems and undermine trust in data. danah boyd explores how systems are being gamed, how data is vulnerable, and what we need to do to build technical antibodies.

Quantifying risks in a container image is a critical aspect of production deployments. With orchestration clusters supporting thousands of nodes, any risk assessment solution must work at production s …

Your users are almost certainly vulnerable in one way or another. Mike North explores a series of common web app security pitfalls, first demonstrating how to exploit the vulnerability and then recommending a pragmatic and effective defense against the attack. Buckle up, because Mike's about to take some things you love and depend on and smash them to bits.

Eddie Copeland shares lessons learned from piloting the London Office of Data Analytics, a collaboration between the Greater London Authority, Nesta, and ASI Data Science that is exploring the potential of applying data analytics to reform public services.

Kubernetes has a growing array of security controls available, but knowing where they all fit in, what the highest priorities are, and how it all helps against real attacks is still far from obvious. …

Open Source Software underpins the internet and many enterprises, but has repeatedly proven itself vulnerable to accident and tampering. High impact exploits lead us to question our unreserved trust i …

Susan Sons demonstrates how to refactor complex and possibly very broken systems and software while in operation, covering architecture, project management, and security aspects.

Poor service design can have devastating consequences for vulnerable people in our country, but it doesn't have to be that way. Jennifer Pahlka explains why intentionally designing government interfaces, especially for low-income people, not only improves social outcomes but costs taxpayers dramatically less. Designing for users isn't just how to make great technology; it's how to govern.