#Security

Shift-left is not about dumping work on developers. It is about automating security controls close to where defects are introduced, so teams can fix fast and security becomes a default property of the system.

Duy TranMay 8, 20268 min

BAs do not need to be a security engineer, but must know how to write requirements about authentication, authorization, audit log, data masking, consent, retention, PII/PHI/PCI and compliance to avoid missing the spec.

Duy TranMay 6, 202612 min

Anthropic has published a 245-page System Card for Claude Mythos Preview — the most powerful AI model ever trained, but NOT released publicly due to its ability to autonomously find zero-days. A detailed analysis of its cyber capabilities, alignment, model welfare, and the remarkable stories from inside.

Duy TranApril 13, 202618 min

This article analyzes in detail the data decentralization architecture for hierarchically structured systems — from governments, to multinational corporations, to retail chains with thousands of branches.

Duy TranDecember 20, 202537 min

How to search on encrypted data? This article presents 3 practical approaches and implementations with Spring Boot + PostgreSQL to protect 100,000+ patient records.

Duy TranDecember 15, 202515 min

OpenVPN is the solution source code VPN solution Open, highly secure, commonly used to access us internal system remote (dev, staging, production) through encrypted channel. This article ...

Duy TranNovember 20, 20255 min

A comprehensive course on VyOS — a powerful open-source network operating system. From installation and basic configuration to firewall, VPN, advanced routing (BGP/OSPF), High Availability, VLANs, WireGuard, and real-world production deployment.

Step-by-step instructions for building a medical information system (HIS/EMR/LIS) with Microservices architecture using Quarkus, PostgreSQL and Keycloak. Compliant with HIPAA, HL7 FHIR, Zero Trust security standards. From architectural design, building services, decentralization, data encryption, audit logging to production deployment on Kubernetes. Each article has practical code, ready to be applied to hospitals and medical facilities.

Comprehensive practical course on deploying Microservices on-premises systems using Kubernetes HA (High Availability), PostgreSQL HA with Patroni, Ceph/Rook storage, Istio Service Mesh, ArgoCD GitOps, Prometheus Observability Stack, HashiCorp Vault, RabbitMQ HA, Redis Cluster and many other production-grade technologies. From infrastructure design, cluster installation, microservices deployment to operations, DR and enterprise standard security. 50 lessons + practice labs on bare-metal/VM.

Comprehensive series on Cloud Native Microservices architecture — from container platforms, Kubernetes, microservices design principles (DDD, Bounded Context), communication models (REST, gRPC, Event-Driven), to Data Management (CQRS, Saga, Event Sourcing), Service Mesh, Observability, Resiliency Patterns, CI/CD GitOps and Security. Combine solid theory with practical architecture for production systems.

Comprehensive course on FinTech and Payment Platform system architecture from basic to advanced. Including Payment Gateway, Digital Wallet, Double-Entry Ledger System, Fraud Detection, AML/KYC Pipeline, Core Banking Architecture, Lending Platform. Practical integration with VNPay, MoMo, ZaloPay, Stripe. Compliant with PCI-DSS, PSD2 and State Bank of Vietnam regulations. Case studies from leading payment systems in the world and Vietnam. Updated according to FinTech trends 2026.

Comprehensive course on Multi-tenant SaaS Platform architecture from basic to production-ready. Includes Tenant Isolation Strategies, Subscription & Billing Engine, Plugin/Extension Architecture, White-labeling, Onboarding Automation, Feature Flags, Usage Metering, and Self-service Admin Portal. Design a SaaS system that meets thousands of tenants at optimal costs. Case studies from Slack, Notion, Atlassian and leading SaaS platforms. Updated 2026.

Comprehensive course on the HL7 FHIR (Fast Healthcare Interoperability Resources) data standard in healthcare — from theoretical foundation to practical implementation. Covers HL7 history (v2, v3, CDA), FHIR R5 architecture, Core Resources (Patient, Observation, Encounter, Medication, DiagnosticReport), RESTful API (CRUD, Search, Bundle, Transaction), Data Types, Terminologies (ICD-10, SNOMED CT, LOINC), Profiles & Extensions, SMART on FHIR, FHIR Subscriptions, building FHIR Server with FHIR HAPI (Java/Spring Boot), integration with EMR/HIS, Security & Privacy systems (HIPAA, GDPR), and practical applications in Vietnam (Circular 54/2017/TT-BYT, VNEID, Social Insurance). Updated to FHIR R5 (v5.0.0), the latest official version from HL7 International.

The HashiCorp Vault course is comprehensive from basic to advanced, helping you master Secret Management, Encryption as a Service, Dynamic Credentials and Identity-based Security. From installing and configuring Secrets Engines (KV, PKI, Transit, Database, AWS, SSH), Auth Methods (Token, Userpass, AppRole, LDAP, OIDC, Kubernetes), Policies, to advanced topics such as Integrated Storage (Raft), High Availability, Auto-unseal, Vault Agent, Vault Secrets Operator, Enterprise features (Namespaces, Sentinel, Replication, DR), monitoring and production operations. Updated to Vault 1.21.x (latest version 2026), including SPIFFE auth, MFA TOTP self-enrollment, KV v2 version attribution and enterprise security best practices.

The System Architecture course is comprehensive from basic to advanced, helping you master how to design large-scale systems. Includes fundamental knowledge of Scalability, Availability, Consistency, architectural patterns such as Microservices, Event-Driven, CQRS, along with infrastructure components such as Load Balancer, CDN, Caching, Message Queues, Database Scaling. The course combines theory with real-life case studies from Netflix, Uber, Twitter and other large systems. Updated according to modern architectural trends 2026.

The Keycloak course is comprehensive from basic to advanced, helping you master Identity and Access Management (IAM) from installing and configuring Realms, Users, Roles, Clients, to advanced modules such as Identity Brokering, User Federation (LDAP/AD), Authentication Flows, Authorization Services, Multi-Factor Authentication, Organizations, Workflows, Passkeys, and integrating with real applications. Updated to Keycloak 26.x (latest version 2026) running on Quarkus, including production operations, High Availability, Kubernetes Operators and enterprise security best practices.

Comprehensive course on Performance Testing and Penetration Testing according to enterprise standards 2026. From processes, tools, implementation to professional reports. Includes k6, Gatling, Artillery, Burp Suite, Nuclei, OWASP ZAP, Metasploit, Cloud/Kubernetes security testing, AI-powered testing, CVSS v4.0, PTES, OWASP Top 10, Chaos Engineering, SRE practices and compliance frameworks. Practical combat instructions with lab exercises and real-world scenarios.

Comprehensive Docker course from fundamentals to advanced level, helping you master container technology from the first concepts to real-world production deployment. Covers Dockerfile, Docker Compose, Networking, Storage, Security, CI/CD, Docker Swarm, Microservices and best practices for enterprise environments. Updated with Docker Engine 27+ and modern container technologies as of 2026.

Comprehensive basic to advanced Kubernetes course for 2026, helping you master container orchestration, deploy production-ready applications, and prepare for CKA/CKAD certification. Updated to Kubernetes 1.32+ with Gateway API, Cilium, OpenTelemetry, Helm 4, Sidecar containers GA, ValidatingAdmissionPolicy, and AI/ML workloads.

Nginx Master Course: From Zero to Hero is a comprehensive course that helps you master Nginx from the most fundamental concepts to advanced techniques in real-world production environments.