Security - ashish-ghub/docs GitHub Wiki

CyberSecurity Ref

Oauth2

• Explain it to Me Like I’m 5: Oauth2 and OpenID

• Enable Authentication and Authorization with Azure Active Directory and Spring Security

• grant-types

• ID Tokens vs Access Tokens

Spring security :

https://docs.spring.io/spring-security/reference/servlet/exploits/index.html

Owasp:

https://owasp.org/www-project-top-ten/

https://cheatsheetseries.owasp.org/cheatsheets/Docker_Security_Cheat_Sheet.html

• Java Security:

https://medium.com/@.midi/java-interview-series-security-826436fbd272

• Architecting Zero Trust Security for Kubernetes Apps with NGINX

  https://www.nginx.com/blog/architecting-zero-trust-security-for-kubernetes-apps-with-nginx/

• container-security https://www.paloaltonetworks.com/cyberpedia/what-is-container-security

- DDOS attacks:

https://docs.aws.amazon.com/whitepapers/latest/aws-best-practices-ddos-resiliency/mitigation-techniques.html

https://www.imperva.com/learn/ddos/syn-flood/

https://www.cloudflare.com/learning/ddos/syn-flood-ddos-attack/

- SSL

https://www.imperva.com/learn/performance/cdn-and-ssl-tls/

Attacks and bounty:

• https://infosecwriteups.com/how-i-got-10-000-from-github-for-bypassing-filtration-of-html-tags-db31173c8b37
• https://weekly.infosecwriteups.com/
• https://www.youtube.com/c/HackerOneTV