Measuring Secrets Management Without Vanity Metrics
A practical security engineering field guide to secrets management, covering risk, implementation, evidence, and team leadership.
Nathan Berg
Turning Requirements for Secrets Management into Delivery Guardrails
A practical security engineering field guide to secrets management, covering risk, implementation, evidence, and team leadership.
Designing Secrets Management: Trust Boundaries, Failure Modes, and Tradeoffs
A practical security engineering field guide to secrets management, covering risk, implementation, evidence, and team leadership.
A Practical Risk Model for Secrets Management
A practical security engineering field guide to secrets management, covering risk, implementation, evidence, and team leadership.
Detecting DNS Tunneling with Zeek, Passive DNS, and Python
DNS is the perfect covert channel for attackers because it is almost always allowed outbound. Tunneling tools encode data in subdomain labels and trick resolvers into carrying payloads through norm...
A Practical Failure Exercise for Dependency Risk Management
A practical security engineering field guide to dependency risk management, covering risk, implementation, evidence, and team leadership.
Dependency Risk Management in Production: Signals That Show the Control Works
A practical security engineering field guide to dependency risk management, covering risk, implementation, evidence, and team leadership.
Implementing Dependency Risk Management Without Slowing Delivery
A practical security engineering field guide to dependency risk management, covering risk, implementation, evidence, and team leadership.
Failure Modes in Dependency Risk Management: A Design-Level Analysis
A practical security engineering field guide to dependency risk management, covering risk, implementation, evidence, and team leadership.
Defining the Security Outcome for Dependency Risk Management
A practical security engineering field guide to dependency risk management, covering risk, implementation, evidence, and team leadership.