Posts tagged security

Cyber Security for Blockchain

This year, I worked on a project and the topic for me is cyber security for blockchain in Oil and Gas industry. It was really good experience since I got the chance to think through this topic and deliver research report to client. Both cyber security and blockchain are interesting areas for me, besides the above project I still have a lot of things not mentioned mainly technical things. So I decide to write this blog as supplement to above project.

Read more ...


Azure Security

Cyber Security is important aspect to digital transformation. To use Azure well, the understanding of the security building blocks is crucial.

Read more ...


Authentication & Authorization Basic

Authentication and Authorization are two relevant but different concepts, which causes confusion sometimes. Both of them are important for SaaS solution. This blog explains the basic of these two concepts.

Read more ...


Blockchain Scenario

This blog explain the potential scenarios of blockchain usage. The content comes from good articles on web.

Read more ...


Https Explainations

Hypertext Transfer Protocol Secure (HTTPS) is a safer version of HTTP, which is the communications protocol of the World Wide Web. An HTTPS session is encrypted using either the SSL protocol (Secure Socket Layer) or TLS protocol (Transport Layer Security) and offers protection against “eavesdropping” and that any change in the transmitted data.

Read more ...


Cryptography Introduction (with .NET code example)

Cryptography is the core part of security, this blog introduces the basic concepts in cryptography and uses .NET as code example.

Read more ...


Blockchain Introduction

Blockchain is the technology behind Bitcoin, this blog introduce what the Blockchain is.

Read more ...


Authenticate Node.js App by OpenId Connect

OpenID Connect (OIDC) is an authentication layer on top of OAuth 2.0; while OAuth 2.0 is an authorization framework. The standard is controlled by the OpenID Foundation. This blog post will go through an example to use your google account to login a Node.js app by using OpenID Connect.

Read more ...


Security: Owasp Top 10

The Open Web Application Security Project (OWASP) is an open community dedicated to enabling organizations to develop, purchase, and maintain applications and APIs that can be trusted. The goal of the Top 10 project is to raise awareness about application security by identifying some of the most critical risks facing organizations. This blog is based on 2013 version, while 2017 version will come very soon.

Read more ...


Threat Modeling: Introduction

With more and more data and software go to internet, the security becomes crucial for software development. OWASP (Open Web Application Security Project) lists top 10 security risks:

Read more ...