What tools and technologies do you use to ensure system security against potential cyber threats?

To ensure the security of Python applications, I use several approaches and technologies:

• Authentication and authorization: libraries like Django with built-in authentication system, Flask-Login for Flask.
• Data encryption: the cryptography module for symmetric and asymmetric encryption.
• Input validation and sanitization: using libraries like pydantic or marshmallow for data validation.
• Protection against SQL injection: using ORM (e.g., SQLAlchemy) and parameterized queries.
• Dependency updates: regularly updating libraries and using pip-audit to find vulnerabilities.
• Logging and monitoring: setting up logs with logging and integrating with monitoring systems.

Example of using cryptography for encrypting a string:

from cryptography.fernet import Fernet

key = Fernet.generate_key()
cipher_suite = Fernet(key)

text = b"secret message"
cipher_text = cipher_suite.encrypt(text)
plain_text = cipher_suite.decrypt(cipher_text)

print(plain_text.decode())