Lessons learned from the past
In today's world IT security is quite an important aspect. Most people have realized that information technology can cause a lot of harm if misused.
The last half-century of computing contained a lot to learn from, in terms of security, and not only for enterprise software.
Let's look into a few lessons learned from the past of enterprise application development. In previous years, the biggest security issues were encryption and approaches on how to manage credentials.
Encrypting and signing data is an incredibly safe way of keeping secrets, if applied correctly. It solely depends on the used algorithms and the key lengths.
There were quite a few encryption and hashing algorithms that turned out to not be secure enough. DES is an example, as well as the often-used MD5 hashing algorithm. As of writing this book, AES with 192- or 256-bit key lengths is considered secure. For the hashing algorithm, SHA-2 or -3 with at least 256 bits is advised.
User credentials that...
