Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by David Sudia
Mitigate OWASP Security Top Threats with an API Gateway
The Open Web Application Security Project (OWASP) produces the OWASP Top 10 every four years, describing the most critical security risks. This list is a starting point for organizations looking to understand and mitigate common web vulnerabilities. Since 2019, the group has also produced a specific Top 10 API security threats to raise awareness about API security and provide guidance on addressing the most pressing threats.
Why Use Infrastructure as Code?
I was a quality engineer on a team at a large e-commerce company that moved from .NET deployed to on-premises data centers to all open source languages on AWS. There was a team of three called the “Cloud” team serving more than 300 software developers, and they quickly put out the message: “We don’t deploy things, we make VPCs (virtual private clouds) and security rules and advise other teams.
5 Best Practices for Securing Your API Gateway
API gateways are the front door to all your microservices. The API gateway’s central role in routing makes it both a valuable tool for simplifying microservices-based applications and a critical point for security. They are responsible for safeguarding the application from external threats, ensuring that only legitimate requests are processed and that malicious or malformed data doesn’t compromise the underlying services.
IDPs: A Piece of the Developer Experience Puzzle
Cloud native software development, thanks to its decentralized nature, can almost appear to be a virtuoso solo act from a single developer. But to orchestrate the symphony, and take advantage of the promise of the cloud’s speed, agility and flexibility, many organizations invest in internal developer platforms (IDPs) as a piece of the cloud native development puzzle.
Security at the Edge: Authentication and Authorization for APIs
I was watching a developer give a demo recently, and part of it included a look at a dashboard of incoming requests and the response codes. I asked the developer how she was generating the request traffic. “Oh I’m not,” she replied. “I’ve just had a public IP up for more than 10 minutes, and people are hitting it looking for vulnerabilities.” I’m used to protecting an active website but not a random IP address. That is the reality of today’s web development environment.
How to Get Started with HTTP/3
Like many around the world, as 2022 ended I looked forward to watching the World Cup. One day, I was watching the World Cup on my phone while walking my dog. As Team USA was about to score, I walked out of my Wi-Fi range, and my phone switched to a cellular connection. The stream paused and didn’t come back for about 15 seconds.
Kubernetes Security Best Practices to Keep You out of the News
Prisma, from Palo Alto Networks, sponsored this post. David Sudia David is an educator — turned developer — turned DevOps Engineer. He's passionate about supporting other developers in doing their best work by making sure they have the right tools and environments. In his day-to-day he's responsible for managing Kubernetes clusters, deploying databases, writing utility apps, and generally being a Swiss-Army knife.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with David
Contact David, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack