https://www.selinuxcomputing.com/blog/SELinux and secure infrastructurehttps://www.selinuxcomputing.com/blog/what-makes-a-waf-high-assurance/https://www.selinuxcomputing.com/blog/what-makes-a-waf-high-assurance/A high-assurance WAF needs explicit security requirements, bounded authority and evidence that its configured behaviour holds during both normal operation and failure.Thu, 29 Oct 2026 00:00:00 GMThttps://www.selinuxcomputing.com/blog/protecting-the-waf-itself/https://www.selinuxcomputing.com/blog/protecting-the-waf-itself/How SELinux Type Enforcement, Linux namespaces and restricted capabilities constrain a WAF component's resources and privileges, and how to test those boundaries.Thu, 29 Oct 2026 00:00:00 GMThttps://www.selinuxcomputing.com/blog/is-the-waf-obsolete/https://www.selinuxcomputing.com/blog/is-the-waf-obsolete/Why WAF inspection still matters as AI-assisted attacks increase the need for behavioural context, API protection and policy-driven enforcement.Fri, 30 Oct 2026 00:00:00 GMThttps://www.selinuxcomputing.com/blog/lower-barriers-faster-attacks/https://www.selinuxcomputing.com/blog/lower-barriers-faster-attacks/How AI makes technical knowledge easier to apply, shortens feedback loops and changes the cost and pace of cyberattacks.Fri, 30 Oct 2026 00:00:00 GMThttps://www.selinuxcomputing.com/blog/security-signals-risk-decisions-enforcement/https://www.selinuxcomputing.com/blog/security-signals-risk-decisions-enforcement/How Web Application and API Protection (WAAP) combines inspection, behavioural signals and reputation, with policy turning observations into scoped gateway actions.Thu, 29 Oct 2026 00:00:00 GMThttps://www.selinuxcomputing.com/blog/selinux-seccomp-containers/https://www.selinuxcomputing.com/blog/selinux-seccomp-containers/How SELinux, seccomp, capabilities and namespaces constrain different parts of a container workload, with a Podman configuration and verification approach.Thu, 25 Aug 2022 00:00:00 GMThttps://www.selinuxcomputing.com/blog/shrinking-window-disclosure-exploitation/https://www.selinuxcomputing.com/blog/shrinking-window-disclosure-exploitation/Why faster exploitation calls for exposure-aware prioritisation, temporary controls and verification of protection in running deployments.Fri, 30 Oct 2026 00:00:00 GMThttps://www.selinuxcomputing.com/blog/labeled-ipsec/https://www.selinuxcomputing.com/blog/labeled-ipsec/How labeled IPsec connects encrypted transport with SELinux policy, and why peer authentication, label interpretation and negative tests matter.Sat, 18 Jan 2025 00:00:00 GMThttps://www.selinuxcomputing.com/blog/seccom/https://www.selinuxcomputing.com/blog/seccom/What seccomp filters can inspect, how their actions differ, and a runnable Linux example that rejects one syscall without terminating the process.Fri, 25 Mar 2022 00:00:00 GMThttps://www.selinuxcomputing.com/blog/testing-a-waf-backend-observations/https://www.selinuxcomputing.com/blog/testing-a-waf-backend-observations/How client responses, gateway decisions and independent backend observations combine to verify WAF outcomes, including failures and inconclusive tests.Thu, 29 Oct 2026 00:00:00 GMT