toxiproxy

Toxiproxy Toxiproxy はネットワーク状態をシミュレートするためのフレームワークです。テスト、CI、開発環境で動作するよう特別に作られており、接続への決定的な改ざんをサポートしつつ、ランダムなカオスとカスタマイズにも対応しています。Toxiproxy は、アプリケーションに単一障害点が存在しないことをテストで証明するために必要なツールです。 2014年10月以降、Shopify のすべての開発環境およびテスト環境で使用に成功しています。詳細は、回復性に関するブログ記事blogを参照してください。 Toxiproxy の利用は2つの部分から構成されます。Go で書かれた T...

DORA Compliance Cybersecurity Guide for Finance

DORA Compliance Cybersecurity: A Practical Guide for Financial Services Teams DORA compliance cybersecurity is now a board-level priority for banks, insurers, investment firms, payment providers, and the ICT providers that support them. The Digital Operational Resilience Act shifts the conversati...

Quantifying the Risk of Transferred Black Box Attacks

Neural networks have become pervasive across various applications, including security-related products. However, their widespread adoption has heightened concerns regarding vulnerability to adversarial attacks. With emerging regulations and standards emphasizing security, organizations must...

Why Chaos Engineering is a Good Stress Test Strategy

Learn about chaos engineering, a method of resilience testing that intentionally introduces “chaos” into a system to discover vulnerabilities and weaknesses that can be exploited by attackers...

How companies can prepare for a heightened threat environment

With high levels of political unrest in various parts of the world, it’s no surprise we’re also in a period of increased cyber threats. In the past, a company’s name, political affiliations, or religious affiliations might push the risk needle higher. However, in the current environment any compa...

The Great DOM Fuzz-off of 2017

Posted by Ivan Fratric, Project Zero Introduction Historically, DOM engines have been one of the largest sources of web browser bugs. And while in the recent years the popularity of those kinds of bugs in targeted attacks has somewhat fallen in favor of Flash which allows for cross-browser exploi...