Introduction: I am back as the editor this week after a long break. Last week, the world witnessed a horrific terror attack by Hamas on Israel. As a human being who values peace, I condem this horrific violence and stand with the nation of Israel an...
Introduction: Attack signatures are the rules and patterns which identifies attacks against your web application. When the Load balancer in the F5 Distributed Cloud (XC) console receives a client request, it compares the request to the attack signat...
Editor's introduction Hello there! Arvin is your editor for this edition of This Week In Security, covering 1st to 7th of October 2023. While last in the list of news, October is Cybersecurity Awareness Month. Our colleagues in F5 Distributed Cl...
In today's fast-paced digital landscape, businesses are constantly seeking ways to enhance their IT infrastructure's performance, scalability, and security while optimizing costs. One solution to meet these demands is the integration of F5 Distribut...
A traditionalist’s view on applications and networking is very much two discrete solutions, servers run apps and devices like proxies and server load balancers aid in feeding servers with safe, low latency data flows. What if you had opportunities...
Along with the likes of Splunk and DataDog, we can add another SIEM vendor in the Distributed Cloud (XC) external logging line up. QRadar has its own native integration drop-down from the Global Log Receiver menu. We know Distributed Cloud’s inn...
Apache Airflow Apache Airflow is an open-source platform used for orchestrating complex workflows and data pipelines. Airflow allows you to define and automate workflows as directed acyclic graphs (DAGs). These DAGs represent a series of tasks and th...
Introduction In the following guide we are configuring Federated AWS Console Access through BIG-IP APM as Identity Provider (IdP). With AWS console we need to be very careful about granting access, checking endpoint and apply Multi-Factor Authenticat...
Inarguably, we are well into the age wherein the user interface for a typical web application has shifted from server-generated markup to APIs as the preferred point of interaction. As developers, we are presented with a veritable cornucopia of tool...
Understanding the Man-in-the-Middle Attack The Man-in-the-Middle (MitM) attack is a fundamental network session hijacking technique. This attack can block, alter, or intercept network traffic. For example, an attacker using MitM might discreetly cap...
Introduction This serves as a companion to the article I previously wrote on security of generative AI. In the previous article, I wrote about security however in this article I wanted to focus on safety of Artificial Intelligence. While safe...
Introduction While following the state-of-the-art of security-related technologies and gathering information is a daily job for engineers, we engineers often take a practical approach to gathering information. For example, when I gather security-rel...
This Week in Security September 10th to 16th, 2023 Aaron here as your editor this week for a round-up of interesting or notable security news from the last week that caught my eye; keeping up to date with new technologies, techniques and informati...
Introduction Adaptive applications utilize an architectural approach that facilitates rapid and often fully-automated responses to changing conditions—for example, new cyberattacks, updates to security posture, application performance degradations, ...
Summary Features like subrequests for authentication, adding/removing HTTP headers, and supporting services of type ExternalName in Kubernetes (K8s) are great reasons to use F5 NGINX Ingress Controller. Documentation and examples of NGINX configurat...
Introduction: In today's digital landscape, where cyber threats constantly evolve, safeguarding an enterprise's web applications is of paramount importance. However, for security engineers tasked with protecting a large enterprise equipped with a s...
Archived F5 Deployment Guides This article contains an index of F5’s archived deployment guides, previously hosted on F5 | Multi-Cloud Security and Application Delivery. They are all now hosted on cdn.f5.com. Archived guides... are no longer support...
Size of the problem In a recent conversation, a customer mentioned they figured they had something on the order of 6000 API endpoints in their environment. This struck me as odd, as I am pretty sure they have 1000+ HTTP-based applications running o...
Jordan here as your editor this week. This week I reviewed Security in K-12 Education, LLM Enhanced Fuzzing, & AI Threat Modeling. Keeping up to date with new technologies, techniques and information is an important part of our role in the F5 SIRT. ...
Introduction Mutual Transport Layer Security (mTLS) is a process that establishes encrypted and secure TLS connection between the parties and ensures both parties use X.509 digital certificates to authenticate each other. It helps to prevent the mal...
