← BlogTag4 posts
#Security
- Year covered: 2021DUC THAI
2021: Access-control tests need more than two roles
Turn the OWASP access-control discussion into concrete API test cases.
- Year covered: 2022DUC THAI
2022: Make tenant isolation a regression test
A practical security-testing theme for multi-tenant business applications.
- Year covered: 2023THUAN NGUY
2023: Ask where a release artifact came from
Use the SLSA milestone to make build provenance a concrete release concern.
- Year covered: 2020MICHAEL
2020: Zero trust starts at the service boundary
What the 2020 zero-trust discussion means for a typical business API.