ayomawdb/ballerina-security

Ballerina is a cloud native programming language, which makes it easy to write microservices that integrate APIs. Here we have examples, which show how to build microservices security patterns with Ballerina and WSO2 Identity Server. This is NOT an official git repo governed by ballerina.io.

Ballerina Security Resources

• Secure by Design Microservices & Integrations, BallerinaCon 2018 by Ayoma Wijethunga : https://www.youtube.com/watch?v=GmIZVwc15bE

• How to Write Secure Ballerina Programs : https://ballerina.io/learn/how-to-write-secure-ballerina-code/

• Security Aware Programming Language — Why, How and Ballerina! : https://medium.com/@ayoma/security-aware-programming-language-why-how-and-ballerina-fef03eadca42

• Securing Ballerina Microservices with WSO2 Identity Server, JWT, OPA and XACML : https://www.youtube.com/watch?v=DBhylSRkpRg

• How to Write Secure Ballerina Programs : https://ballerina.io/learn/how-to-write-secure-ballerina-code/

Microservices Security Resources

• Microservices Security Landscape, Identiverse 2018 : https://www.youtube.com/watch?v=LNihgqvOqOk

• JWT, JWS and JWE for Not So Dummies! : https://medium.facilelogin.com/jwt-jws-and-jwe-for-not-so-dummies-b63310d201a3

• Securing Microservices : https://medium.facilelogin.com/securing-microservices-with-oauth-2-0-jwt-and-xacml-d03770a9a838

• OPA: The Cloud Native Policy Engine, KubeCon 2018 : https://www.youtube.com/watch?v=XEHeexPpgrA

• Open Policy Agent Deep Dive, KubeCon 2018 : https://www.youtube.com/watch?v=4mBJSIhs2xQ

• Entitlements: Understandable Container Security Controls, KubeCon 2018 : https://www.youtube.com/watch?v=Jbqxsli2tRw

• SPIFFE Project Intro, KubeCon 2018 : https://www.youtube.com/watch?v=0LSaNrOabH4

• SPIFFE Deep Dive, KubeCon 2018 : https://www.youtube.com/watch?v=ltrV-Qmh3oY https://www.youtube.com/watch?v=sXwFB34BBrM

• Istio Security : https://istio.io/docs/concepts/security/

• From Kubelet to Istio: Kubernetes Network Security Demystified, KubeCon 2018 : https://www.youtube.com/watch?v=Uocf67aD5QQ

• Containers: The Dr. Jekyll and Mr. Hyde of Security, RSAConference 2007 : https://www.youtube.com/watch?v=_5uZnM1yv0Y

• Introduction to Container Security : https://www.youtube.com/watch?v=15bsTualHnA

• Running with Scissors, KubeCon 2018 : https://www.youtube.com/watch?v=ltrV-Qmh3oY

• Security Namespace: Making Linux Security Frameworks Available to Containers : https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-sun.pdf

• Introduction to Container Security : https://www.docker.com/sites/default/files/WP_IntrotoContainerSecurity_08.19.2016.pdf

• Securing a Kubernetes Cluster : https://kubernetes.io/docs/tasks/administer-cluster/securing-a-cluster/

• Security in Plan 9 : https://www.usenix.org/legacy/event/sec02/cox/cox.pdf

Projected Related to Microservices Security

• Open Policy Agent (OPA) : https://www.openpolicyagent.org/

• SPIFFE : https://spiffe.io/

• Kubernetes Policy Controller with OPA : https://github.com/Azure/kubernetes-policy-controller

Language Level Security

• Some thoughts on security after ten years of qmail 1.0 : https://cr.yp.to/qmail/qmailsec-20071101.pdf

• Taint Analysis : http://web.cs.iastate.edu/~weile/cs513x/2018spring/taintanalysis.pdf

Ballerina Resources

• Launching Ballerina at the WSO2Con US 2017 by Dr. Sanjiva Weerawarana and Sameera Jayasoma : https://www.youtube.com/watch?v=q6dlGFV86Is

• Ballerina: How it all started : https://www.youtube.com/watch?v=mpuXPC8YS1s

• Ballerina and London Olympics : https://www.youtube.com/watch?v=P92y5cgEa0Q

• Ballerina Compiler — Design : https://medium.com/@sameerajayasoma/ballerina-compiler-design-3406acc2476c

• Ballerina Runtime — Evolution : https://medium.com/@sameerajayasoma/ballerina-runtime-evolution-f82305e4ab8e

• Ballerina is not Java, BallerinaCon 2018 : https://www.youtube.com/watch?v=DusyY-oH-JM

• Ballerina - A new language for the networked world : https://www.youtube.com/watch?v=JtwmHo5Ivwg