Sharing notes from my ongoing learning journey — what I build, break and understand along the way.
CIA Triad: The Three Core Pillars of Information Security I’m still quite new to security. As I read and explore more, I’m starting to see that while the fundamentals aren’t necessarily complicated, they definitely require careful thinking.This post is more…
How I Discovered the Hidden Power of System Logs While researching security-related topics, I kept coming across the term “logs.” I didn’t quite understand what made them so important at first. I thought logs were just boring text files the…
What Is OAuth 2.0? A Deep Dive into the Authorization Protocol Not long ago, I tried to implement Google OAuth login in one of my own web projects.Although I haven’t fully succeeded yet, the process pushed me to deeply understand…
What Are IDS and IPS? My Deep Dive into Real Network Protection Recently, I’ve been going deeper into network security, and two concepts kept popping up that I didn’t fully grasp at first: IDS and IPS.As I started exploring them,…
OWASP Top 10 – A10: Server-Side Request Forgery (SSRF) The final item in the OWASP Top 10 is A10: Server-Side Request Forgery (SSRF) — and it’s one of the most interesting (and dangerous) ones I’ve researched. At first, it sounds…
OWASP Top 10 – A09: Security Logging and Monitoring Failures Next up in the OWASP Top 10 series is a topic that’s less about preventing attacks and more about detecting and responding to them:A09: Security Logging and Monitoring Failures This…
OWASP Top 10 – A08: Software and Data Integrity Failures The eighth item in the OWASP Top 10 is Software and Data Integrity Failures. This category covers a wide range of issues related to trusting software, updates, configurations, or data…
OWASP Top 10 – A07: Identification and Authentication Failures While exploring software security topics, I came across an area that directly affects the very foundation of any application: authentication and identification flaws. OWASP groups these issues under A07: Identification and…
OWASP Top 10 – A06: Vulnerable and Outdated Components As I continued through the OWASP Top 10 series, the next topic brought me to an area that’s extremely common in software development, yet often underestimated in day-to-day security practices: Vulnerable…
OWASP Top 10 – A05: Security Misconfiguration As I continue diving into software security, the next item in the OWASP Top 10 list caught my attention: A05 – Security Misconfiguration. At first glance, it seemed like a basic issue —…