Prabath Siriwardena – författare
Visar alla böcker från författaren Prabath Siriwardena. Handla med fri frakt och snabb leverans.
6 produkter
6 produkter
459 kr
Skickas inom 10-15 vardagar
Prepare for the next wave of challenges in enterprise security. Learn to better protect, monitor, and manage your public and private APIs. Enterprise APIs have become the common way of exposing business functions to the outside world. Exposing functionality is convenient, but of course comes with a risk of exploitation. This book teaches you about TLS Token Binding, User Managed Access (UMA) 2.0, Cross Origin Resource Sharing (CORS), Incremental Authorization, Proof Key for Code Exchange (PKCE), and Token Exchange. Benefit from lessons learned from analyzing multiple attacks that have taken place by exploiting security vulnerabilities in various OAuth 2.0 implementations. Explore root causes, and improve your security practices to mitigate against similar future exploits. Security must be an integral part of any development project. This book shares best practices in designing APIs for rock-solid security. API security has evolved since the first edition of this book, and the growth of standards has been exponential. OAuth 2.0 is the most widely adopted framework that is used as the foundation for standards, and this book shows you how to apply OAuth 2.0 to your own situation in order to secure and protect your enterprise APIs from exploitation and attack. What You Will LearnSecurely design, develop, and deploy enterprise APIsPick security standards and protocols to match business needsMitigate security exploits by understanding the OAuth 2.0 threat landscapeFederate identities to expand business APIs beyond the corporate firewallProtect microservices at the edge by securing their APIsDevelop native mobile applications to access APIs securelyIntegrate applications with SaaS APIs protected with OAuth 2.0Who This Book Is ForEnterprise security architects who are interested in best practices around designing APIs. The book is also for developers who are building enterprise APIs and integrating with internal and external applications.
610 kr
Skickas inom 10-15 vardagar
Understand the key challenges and solutions around building microservices in the enterprise application environment. This book provides a comprehensive understanding of microservices architectural principles and how to use microservices in real-world scenarios.Architectural challenges using microservices with service integration and API management are presented and you learn how to eliminate the use of centralized integration products such as the enterprise service bus (ESB) through the use of composite/integration microservices. Concepts in the book are supported with use cases, and emphasis is put on the reality that most of you are implementing in a “brownfield” environment in which you must implement microservices alongside legacy applications with minimal disruption to your business. Microservices for the Enterprise covers state-of-the-art techniques around microservices messaging, service development and description, service discovery, governance, and data management technologies and guides you through the microservices design process. Also included is the importance of organizing services as core versus atomic, composite versus integration, and API versus edge, and how such organization helps to eliminate the use of a central ESB and expose services through an API gateway.What You'll LearnDesign and develop microservices architectures with confidencePut into practice the most modern techniques around messaging technologies Apply the Service Mesh pattern to overcome inter-service communication challengesApply battle-tested microservices security patterns to address real-world scenariosHandle API management, decentralized data management, and observabilityWho This Book Is ForDevelopers and DevOps engineers responsible for implementing applications around a microservices architecture, and architects and analysts who are designing such systems
507 kr
Skickas inom 7-10 vardagar
Microservices Security in Action teaches readers how to secure their microservices applications code and infrastructure.
After a straightforward introduction to the challenges of microservices security, the book covers fundamentals to secure both the application perimeter and service-to-service communication. Following a hands-on example, readers explore how to deploy and secure microservices behind an API gateway as well as how to access microservices accessed by a single-page application (SPA).
Key Features
Key microservices security fundamentals Securing service-to-service communication with mTLS and JWT Deploying and securing microservices with Docker Using Kubernetes security Securing event-driven microservices Using the Istio Service Mesh
For developers well-versed in microservices design principles who have a basic familiarity with Java.
About the technology
As microservices continue to change enterprise application systems, developers and architects must learn to integrate security into their design and implementation. Because microservices are created as a system of independent components, each a possible point of failure, they can multiply the security risk.
Prabath Siriwardena is the vice president of security architecture at WSO2, a company that produces open source software, and has more than 12 years of experience in the identity management and security domain.
Nuwan Dias is the director of API architecture at WSO2 and has worked in the software industry for more than 7 years, most of which he spent focusing on the API management domain. Both have helped build security designs for Fortune 500 companies including Boeing, Verizon, Nissan, HP, and GE.
418 kr
Kommande
An example-driven guide to securing access to your applications with OpenID Connect, the OAuth-based identity layer that keeps billions of user interactions safe every day. In OpenID Connect in Action you will: Build client applications that integrate OpenID Connect adhering to best practices Create single-page applications secured with OpenID Connect Integrate OpenID connect with native mobile and server-side web applications Federate access to APIs/microservices from a client application Use OpenID Connect to secure access to smart TV applications Explore common login security pitfalls and how to avoid them Take a deep-dive into the internals of OpenID Connect Login security is a complex problem with a simple solution: OpenID Connect. OpenID Connect in Action takes you under the hood of this reliable identity layer, showing you how to integrate OpenID Connect into a server-side web application, a single-page application (SPA), a native mobile application, APIs, and more. about the technology OpenID Connect is an easy-to-implement identity layer built on top of OAuth 2. OpenID Connect helps secure billions of user interactions on the internet daily. Because it uses the JSON standard, OpenID Connect is more lightweight than legacy alternatives and flexible enough to meet the ID federation requirements for all types of modern applications. about the book OpenID Connect in Action teaches you to deploy OpenID Connect to secure access to your apps. Ten-year access management veteran Prabath Siriwardena takes you in-depth with the widely adopted technology, showing you how to optimize OpenID Connect for your application's specific use cases. You'll work to secure end-to-end example applications created with React and React Native, and even develop solutions for Smart TVs and APIs.
Mastering Apache Maven 3: Enhance developer productivity and address exact enterprise build requirements by extending Maven
Häftad, Engelska, 2014
637 kr
Skickas inom 5-8 vardagar
Maven Essentials
Get started with the essentials of Apache Maven and get your build automation system up and running quickly
Häftad, Engelska, 2015
348 kr
Skickas inom 5-8 vardagar
Get started with the essentials of Apache Maven and get your build automation system up and running quicklyKey Features[*] Explore the essentials of Apache Maven essentials to arm yourself with all the ingredients needed to develop a comprehensive build automation system[*] Identify the extension points in Apache Maven and learn more about them in-depth[*] Improve developer productivity by optimizing the build process with best practices in Maven using this compact guideBook DescriptionMaven is the #1 build tool used by developers and it has been around for more than a decade. Maven stands out among other build tools due to its extremely extensible architecture, which is built on of the concept of convention over configuration. It’s widely used by many open source Java projects under Apache Software Foundation, Sourceforge, Google Code, and more.Maven Essentials is a fast-paced guide to show you the key concepts in Maven and build automation. We get started by introducing you to Maven and exploring its core concepts and architecture. Next, you will learn about and write a Project Object Model (POM) while creating your own Maven project. You will also find out how to create custom archetypes and plugins to establish the most common goals in build automation. After this, you’ll get to know how to design the build to prevent any maintenance nightmares, with proper dependency management. We then explore Maven build lifecycles and Maven assemblies. Finally, you will discover how to apply the best practices when designing a build system to improve developer productivity.What you will learn[*] Comprehend the key concepts in Apache Maven[*] Build your own custom plugins and get to know how Maven extension points are used[*] Troubleshoot build issues with greater confidence[*] Optimize Maven's configuration settings[*] Write custom lifecycles and extensions[*] Get hands-on and create a Maven assembly[*] Explore the best practices to design a build system that improves developer productivityWho this book is forThe book is ideal for for experienced developers who are already familiar with build automation, but want to learn how to use Maven and apply its concepts to the most difficult scenarios in build automation.