--- title: "#security-architecture articles | Hashnode" description: "Explore 27 articles tagged #security-architecture on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/security-architecture" --- Tag # #security-architecture 27 posts · 4 followers [Kazem Mortazavi](https://hashnode.com/@kazem-mortazavi) · [3d ago](https://hashnode.com/posts/defense-in-depth-in-practice-what-stops-an-attacker-after-the-firewall/6af067a362c865ab83972001) ### [Defense in Depth in Practice: What Stops an Attacker After the Firewall?](https://securityland.hashnode.dev/defense-in-depth-in-practice-what-stops-an-attacker-after-the-firewall?utm_source=hashnode&utm_medium=feed) Ask IT managers what their network security rests on, and most will name a firewall or an antivirus product. That is exactly the problem: no single point in a network is secure on its own. Defense in 2 min read · [securityland.hashnode.dev](https://securityland.hashnode.dev/defense-in-depth-in-practice-what-stops-an-attacker-after-the-firewall?utm_source=hashnode&utm_medium=feed) [Milan Nikic](https://hashnode.com/@nick79) · [Oct 21](https://hashnode.com/posts/xml-external-entity-injection-a-security-architect-s-perspective-part-2/6ad8818ba7508b2879f9bd09) ### [XML external entity injection: A security architect's perspective (Part 2)](https://securitydepth.hashnode.dev/xml-external-entity-injection-a-security-architect-s-perspective-part-2?utm_source=hashnode&utm_medium=feed) Disabling DTDs in one parser doesn't scale. How to eliminate XXE architecturally: central parser policy, gateway validation, and dependency control. 18 min read · [securitydepth.hashnode.dev](https://securitydepth.hashnode.dev/xml-external-entity-injection-a-security-architect-s-perspective-part-2?utm_source=hashnode&utm_medium=feed) [vancedevllm](https://hashnode.com/@vancedevllm) · [Sep 11](https://hashnode.com/posts/sc-100-modern-cybersecurity-architecture/6aa37d453681260006c4ad25) ### [Designing a Modern Cybersecurity Architecture with Microsoft Security](https://vancedevllmitnotes.hashnode.dev/sc-100-modern-cybersecurity-architecture?utm_source=hashnode&utm_medium=feed) Explore Zero Trust, identity protection, security operations, infrastructure security, and application in modern cybersecurity architecture. 4 min read · [vancedevllmitnotes.hashnode.dev](https://vancedevllmitnotes.hashnode.dev/sc-100-modern-cybersecurity-architecture?utm_source=hashnode&utm_medium=feed) [Zero Trust Threads](https://hashnode.com/@zerotrustthreads) · [Aug 22](https://hashnode.com/posts/zero-trust-explained-without-the-buzzword-soup/6a8a162de317f97a9ae4ce43) ### [Zero Trust Explained Without the Buzzword Soup](https://zerotrustthreads.hashnode.dev/zero-trust-explained-without-the-buzzword-soup?utm_source=hashnode&utm_medium=feed) Zero Trust explained without the buzzwords. Learn how identity, least privilege, continuous verification, and resource-based access improve security. 5 min read · [zerotrustthreads.hashnode.dev](https://zerotrustthreads.hashnode.dev/zero-trust-explained-without-the-buzzword-soup?utm_source=hashnode&utm_medium=feed) [Milan Nikic](https://hashnode.com/@nick79) · [Aug 18](https://hashnode.com/posts/server-side-request-forgery-security-architect-s-perspective-part-2/6a8410e6180319c7dd4d3430) ### [Server-Side Request Forgery: Security Architect's Perspective (Part 2)](https://securitydepth.hashnode.dev/server-side-request-forgery-security-architect-s-perspective-part-2?utm_source=hashnode&utm_medium=feed) A security architect's guide to SSRF threat modeling, egress controls, cloud metadata hardening, compliance, metrics, and incident response. 17 min read · [securitydepth.hashnode.dev](https://securitydepth.hashnode.dev/server-side-request-forgery-security-architect-s-perspective-part-2?utm_source=hashnode&utm_medium=feed) [Topaz Hurvitz](https://hashnode.com/@topazyo) · [Aug 15](https://hashnode.com/posts/microsoft-ai-security-status-first/6a809ce111cedcd28ddbe26b) ### [Status-first: how to read Microsoft's AI security stack without overstating your coverage](https://cloudsecops.hashnode.dev/microsoft-ai-security-status-first?utm_source=hashnode&utm_medium=feed) Microsoft AI security sources can conflict. Learn how to validate capability status across Learn, Roadmap, and Message Center before claiming coverage 13 min read · [cloudsecops.hashnode.dev](https://cloudsecops.hashnode.dev/microsoft-ai-security-status-first?utm_source=hashnode&utm_medium=feed) [Milan Nikic](https://hashnode.com/@nick79) · [Jul 27](https://hashnode.com/posts/file-upload-vulnerabilities-security-architect-s-perspective-part-2/6a674722fc8a1c41d586e30a) ### [File Upload Vulnerabilities: Security Architect's Perspective (Part 2)](https://securitydepth.hashnode.dev/file-upload-vulnerabilities-security-architect-s-perspective-part-2?utm_source=hashnode&utm_medium=feed) Learn how to design secure file upload architecture with threat modeling, isolated processing, compliance mapping, testing, and incident response. 16 min read · [securitydepth.hashnode.dev](https://securitydepth.hashnode.dev/file-upload-vulnerabilities-security-architect-s-perspective-part-2?utm_source=hashnode&utm_medium=feed) [Milan Nikic](https://hashnode.com/@nick79) · [May 11](https://hashnode.com/posts/os-command-injection-security-architect-s-perspective-part-2/6a01c3d3fca21b0d4b12e751) ### [OS Command Injection: Security Architect's Perspective (Part 2)](https://securitydepth.hashnode.dev/os-command-injection-security-architect-s-perspective-part-2?utm_source=hashnode&utm_medium=feed) Architecture and program controls for preventing OS command injection: threat modeling, risk scoring, container hardening, and incident response. 22 min read · [securitydepth.hashnode.dev](https://securitydepth.hashnode.dev/os-command-injection-security-architect-s-perspective-part-2?utm_source=hashnode&utm_medium=feed) [Milan Nikic](https://hashnode.com/@nick79) · [Apr 28](https://hashnode.com/posts/directory-traversal-a-security-architect-s-perspective-part-3/69f09a8310a70b3335a0d205) ### [Directory Traversal: A Security Architect's Perspective (Part 3)](https://securitydepth.hashnode.dev/directory-traversal-a-security-architect-s-perspective-part-3?utm_source=hashnode&utm_medium=feed) Threat modeling, risk prioritization, compliance mapping for PCI-DSS, SOC 2, GDPR, and security metrics for directory traversal at scale. 16 min read · [securitydepth.hashnode.dev](https://securitydepth.hashnode.dev/directory-traversal-a-security-architect-s-perspective-part-3?utm_source=hashnode&utm_medium=feed) [The Secure Stack](https://hashnode.com/@the-secure-stack) · [Apr 18](https://hashnode.com/posts/qubes-os-security-best-practices-the-philosophy-of-compartmentalization/69e3649b9020749e6a11da22) ### [Qubes OS Security Best Practices: The Philosophy of Compartmentalization](https://thesecurestack.hashnode.dev/qubes-os-security-best-practices-the-philosophy-of-compartmentalization?utm_source=hashnode&utm_medium=feed) Qubes OS can't stop user error, but it can contain it. Explore the security vs. convenience trade-off and the philosophy behind true digital resilience. 3 min read · [thesecurestack.hashnode.dev](https://thesecurestack.hashnode.dev/qubes-os-security-best-practices-the-philosophy-of-compartmentalization?utm_source=hashnode&utm_medium=feed)