Ivan Piskunov – Medium

Ivan Piskunov

Secure SDLC (Part 2): ASOC, ASPM, DevSecOps and the AppSec future

Dive dive into Secure SDLC by SecChamp, senior engineer and AppSec manager

Apr 22, 2024

Secure SDLC (Part 2): ASOC, ASPM, DevSecOps and the AppSec future

Apr 22, 2024

Secure SDLC (Part 1): issues, approach, tech metrics, team’s KPI

Dive dive into Secure SDLC by SecChamp, senior DevSecOps engineer and AppSec manager

Apr 14, 2024

Secure SDLC (Part 1): issues, approach, tech metrics, team’s KPI

Apr 14, 2024

Get an email whenever Ivan Piskunov publishes.

By signing up, you will create a Medium account if you don’t already have one. Review our Privacy Policy for more information about our privacy practices.

Medium sent you an email at to complete your subscription.

A little bit about Node.JS security by hands

This short doc intend provide a simple guidelines on how to secure a Node.js application.

Apr 5, 2023

A little bit about Node.JS security by hands

Apr 5, 2023

Express Guide Sysdig Falco — install and config

Sysdig Falco — a tool for detecting anomalies and monitoring system activity. It works both on the host and in containers, if required.

Jul 25, 2022

Express Guide Sysdig Falco — install and config

Jul 25, 2022

K8s security audit: run Kube-bench as job in pipeline

Intro

Jul 20, 2022

K8s security audit: run Kube-bench as job in pipeline

Jul 20, 2022

API Security Checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API.

Jul 13, 2022

API Security Checklist

Jul 13, 2022

The security mechanisms in microservice architectures

With the introduction of a microservice architecture, the components responsible for authorization are moved to a separate microservice…

Jul 11, 2022

The security mechanisms in microservice architectures

Jul 11, 2022

Linux Hardening. We select tools for a comprehensive security audit

In this article, we will get acquainted with the main utilities for Linux hardening. In Russian, this is called something like “checking…

Jul 1, 2022

Linux Hardening. We select tools for a comprehensive security audit

Jul 1, 2022

An impenetrable DevOps cluster. Configuring and Hardening Kubernetes

The most well-known tool for containerizing and automating application deployment is Docker. Known, but not the only one: it is worthy of…

Jun 27, 2022

An impenetrable DevOps cluster. Configuring and Hardening Kubernetes

Jun 27, 2022

We defend the port. How to protect infrastructure on Docker with minimal effort

Docker is a great thing that can save a lot of time and effort. In this article, we will talk about how to use Docker as securely as…

Jun 25, 2022

We defend the port. How to protect infrastructure on Docker with minimal effort

Jun 25, 2022

Ivan Piskunov

Ivan Piskunov

DevSecOps expert, Security Evangelist, Researcher, Speaker, Book’s author

Following

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams