Category: IT Security

When performing LLM security diagnostics, this question often arises: “Isn’t it enough to just input a few known Prompt Injection patterns?” On the surface, it might seem that way. Just as in web security diagnostics where typical payloads like SQL Injection, XSS, and Directory Traversal are tested, it might feel like standardized prompts could determine…

Settings that determine a model’s characteristics, cost, stability, and security test results When using an LLM, we don’t just input prompts. Most LLM APIs or local execution tools allow you to set the following parameters: Parameter Varies by model/environment? Description model Yes The name of the model to use varies by environment temperature Yes Mostly…

When operating a server, there are times when you need to find files that meet specific conditions among tens of thousands of files. Beyond simply searching by name, you need to handle complex requirements such as “who can execute it”, “whether it has dangerous security settings”, or “whether to select and back up only large…

Hello, smart security analysts! 🕵️‍♂️💻 Last time, we identified the “flower” of malware analysis: ‘Unique Signatures’. From typos left by hackers, project paths, to core machine code (Hex) that never changes… excellent ingredients have been gathered, haven’t they? 🥩🥦🥕 Now it’s time to use these ingredients to complete the “dish” called YARA Rule. However, manually…

Hello, sharpshooter security analysts! 🔫 Last time, we learned the theory of YARA rules (Meta, Strings, Condition). You understood the principle of “detecting by combining strings and conditions,” right? However, more important than theory is the question: “Exactly ‘which’ strings should be used?” If you pick just any string, you might end up with a…

Hello! When dealing with Linux, you often encounter peculiar permissions that cannot be explained by rwx (read/write/execute) alone. “Why can I change my own password, but the /etc/shadow file can only be viewed by root?” “Why can someone else delete a file I created in a shared folder?” The answer to all these questions lies…

Hello, server engineers and Linux users! Did you know that there’s a ‘treasure map’ that a Linux system refers to first when it boots up? It’s the /etc/fstab file. If even a single dot is misplaced in this file, your server won’t boot and will display a terrifying ‘Emergency Mode’ screen. Today, we’ll dissect an…

Hello! We’ve previously learned what Backstage is and why it’s needed. Now, we’re going to delve into the 5 core features of Backstage that developers most frequently access and use in the field. Let’s explore together how these features interact to create a ‘Golden Path’! 🌟 📌 Learning Objectives for This Post After reading this…

Hello! I’m Ilseon Choi, a cloud security and platform engineering expert. 🚀 If we discussed the necessity of a developer portal in the last post, today we’ll delve into the actual entity: Backstage. Let’s explore its philosophy and structure, understanding why it’s called a “framework” rather than just a “tool to install and use”! 📌…

Hello! Today, we’re going to delve deep into one of the biggest challenges faced by modern cloud-native organizations: how to simultaneously achieve ‘developer autonomy’ and ‘operational efficiency’. Shall we take a closer look at the Developer Portal, which is at the heart of this solution? 🔎 https://tag-app-delivery.cncf.io/whitepapers/platforms/#capabilities-of-platforms 📌 What This Post Will Cover (Chapter Overview)…