Network security has made some major advances in the past couple decades, so much so, that is has become incredibly difficult to attack a well secured network perimeter as a means of accessing the data and systems contained therein. So it’s no wonder that malicious users have begun pursuing other avenues and skirting the perimeter defenses all together. From the attacker’s standpoint, breaching a network is all about economics and ROI. It just doesn’t make sense to mount an attack that will c …

Social information (our preferences, shares, tags, comments, collections, etc.) is the fastest growing and most valuable type of information on the web.  We have given the responsibility of stewarding that data to just a couple companies.  This is a problem. We need to rethink social.  Does it need to be an end-to-end service where the price of participation is the forfeiture of our data?  Does it need to have just a single interface, designed and served by the company that sells our data? Or ca …

Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. With Shiro’s easy-to-understand API, you can quickly and easily secure any application – from the smallest mobile applications to the largest web and enterprise applications. We recommend you start with the 10 Minute Tutorial which gives you a feel for Shiro and its API. Then feel free to get started using Shiro in your own applications. If you hav …