In the past, enterprise software focused on protecting network access through on-premises firewalls and VPNs, working on the assumption that everything within the network was secure. However, today, as accessing data has extended beyond on-premises locations to cloud and hybrid networks, SaaS platforms require a security model that can address a broader range of attack vectors. Zero Trust security addresses this pressing need. It operates on the following foundational principles:

Image by vectorjuice on Freepik

Programmable data planes offer dynamic control for cloud native applications. Technologies like eBPF and Kubernetes provide an abstraction to improve flexibility, scalability, and performance. Read this article to see how you can use programmable data planes with eBPF, or watch the introductory video for an overview of the concepts.

The concept of the "digital double" isn’t new, but it’s gaining importance as more and more of our lives are lived in the digital world. Asanka Abeysinghe, WSO2's chief technology officer and the creator of this concept, was a guest on a recent KuppingerCole videocast hosted by Martin Kuppinger, founder and principal analyst at KuppingerCole.

Introduction

Amazon API Gateway is a service offered by AWS that enables users to create, publish, and maintain secure APIs on any scale. It supports both RESTful APIs and WebSocket APIs. However, It's crucial to secure these APIs before allowing applications to access them. The use of OAuth2 tokens and JWTs is the standard method of securing APIs.

Introduction

Photo by Waldemar on Unsplash

This is an extended version of articles 1 and 2 published in TNS.

New features include Bring Your Own Container supporting developers’ languages of choice, deployment flexibility via Choreo DevOps Portal and private data planes, GraphQL, and internal APIs for enhanced security