Security by Design: Building Full-Stack Applications With DevSecOps

Building a full-stack application with Angular (frontend) and Node.js (backend) demands a holistic security approach. Security by design means baking in security from the architecture stage and throughout development, rather than as an afterthought. DevSecOps extends DevOps by integrating security into every phase of the software lifecycle – developers, operations, and security teams share responsibility

When Airflow Tasks Get Stuck in Queued: A Real-World Debugging Story

Recently, my team encountered a critical production issue in which Apache Airflow tasks were getting stuck in the “queued” state indefinitely. As someone who has worked extensively with Scheduler, I’ve handled my share of DAG failures, retries, and scheduler quirks, but this particular incident stood out both for its technical complexity and the organizational coordination

How GitHub Copilot Helps You Write More Secure Code

Early-career developers often struggle with secure coding practices. GitHub Copilot, an AI pair programmer, can assist in writing safer code when used wisely. However, guidance is key; a 2021 study found that approximately 40% of Copilot’s generated code had security vulnerabilities when developers weren’t careful. GitHub responded by upgrading Copilot’s AI model and adding a

ITBench, Part 1: Next-Gen Benchmarking for IT Automation Evaluation

The remarkable promise of GenAI-based agentic (AI agents) solutions, coupled with recent improvements in their ability to handle intricate tasks,  has increased the potential for AI agents to manage IT systems. Given the complexity and criticality of IT systems, a key challenge in IT automation is finding reliable ways to evaluate agents before using them

A Guide to Auto-Tagging and Lineage Tracking With OpenMetadata

Tagging metadata and tracking SQL lineage manually is often tedious and prone to mistakes in data engineering. Although essential for compliance and data governance, these tasks usually involve lengthy manual checks of datasets, table structures, and SQL code.  Thankfully, advancements in large language models (LLMs) such as GPT-4 provide a smarter and more efficient solution.

Proactive Security in Distributed Systems: A Developer’s Approach

Once the product becomes famous and the customer base increases, it is no longer viable to serve the customers using simple systems without too many bottlenecks. Distributed software systems are inevitable, and it is directly related to the growth of the product. Building distributed systems is hard, and at the same time, it is fun.

The Role of AI in Identity and Access Management for Organizations

Introduction Identity and Access Management (IAM) is a key pillar of any organization. It plays a vital role in enterprise security—securing the resources and the data of an organization by making sure only authorized users have access. As the IT infrastructure of organizations is growing exponentially and increasing cyber threats, rule based IAM solutions are often

Analyzing Techniques to Provision Access via IDAM Models During Emergency and Disaster Response

Introduction A natural or human-made disaster is a significant concern for populations across the world. It is important that the response to such cases be prompt and effective so that human and financial losses are minimized. In addition, while the response operations to such critical situations are often complex and complicated, a timely response is

IoT and Cybersecurity: Addressing Data Privacy and Security Challenges

The Internet of Things has shaken up our lives, connecting everything from smart homes to massive industrial systems in a pretty smooth way. Sure, these tech upgrades make our day-to-day so much easier, but they have also brought some real concerns about security and privacy. With billions of IoT devices out there, are we really