Archives
Earlier writing and projects remain available here for reference. The main pages are reserved for the work that best represents what I am exploring now.
Archived writing
Tutorials, surveys, and earlier technical notes.
2024
-
Cloud Security - Secure Data and Applications in the Cloud
Cloud security fundamentals, shared responsibility, identity, data, network controls, logging, recovery, and configuration management.
-
Compliance and Governance - Ensuring Regulatory Adherence
How security governance turns obligations and risk decisions into owned controls, evidence, review, and accountable action.
-
Protecting Your Software from Vulnerabilities
Practical application security from design and coding through dependencies, testing, deployment, logging, and incident readiness.
-
Identity and Access Management (IAM)
How IAM manages human, device, and workload identities through authentication, authorization, lifecycle controls, and auditing.
-
Cryptography and Encryption
A practical guide to encryption, hashing, signatures, password storage, key exchange, certificates, and post-quantum standards.
-
Cybersecurity - Network and Endpoint Security
A practical guide to firewalls, segmentation, secure remote access, endpoint hardening, detection, and trusted boot.
-
Cybersecurity - Security Fundamentals
A practical introduction to the CIA triad, risk, threat modeling, security controls, and vulnerability management.
-
HTTP And Its Evolution
How HTTP evolved from one-request connections to multiplexed streams over TCP and QUIC, and what each version changed on the web.