16 posts in category security

RBAC, Pod Security Admission, NetworkPolicy, and supply-chain controls — the security practices every Kubernetes production workload needs. Part 5 of 7.

Application security: SQL Injection, Log4Shell, OWASP Top 10, and Input Validation — attacks that affect confidentiality and integrity, not availability.

Technical (D)DoS attack vectors: Layer 3/4 floods, BGP hijacking, Layer 7 application DDoS, and operational resilience strategies to keep services available.

Non-technical (D)DoS overview: how denial-of-service attacks operate at the Business, Social, and Informational level, and what protection looks like at each.

Index for a three-part (D)DoS and Application Security series: business, social, and technical denial-of-service, plus SQL Injection, Log4Shell, and OWASP risks.

Encryption, RBAC, and WORM compliance for log archives: Elasticsearch, OpenSearch, Loki, Quickwit, ClickHouse. S3 Object Lock, audit logging. Part 3 of 5.