This article explains the importance of software architecture, defines its evaluation process, outlines a step‑by‑step workflow, introduces common evaluation methods such as ATAM, ARID, and ADR, and discusses typical risks and mitigation strategies for successful architectural assessments.
The 2018 TSB bank migration disaster, which corrupted data for 13 million customers and cost billions, illustrates how inadequate testing, overly complex system integration, and poor change‑management practices can cripple banking IT operations and highlight the need for rigorous operational risk controls.
This article details the evolution, architectural redesign, and performance optimizations of MaFengWo's membership system, covering identity strategy transformation, four‑layer service architecture, rights pool construction, third‑party integration, points integration, concurrency control, traffic shaping, and risk management to support scalable, high‑quality user experiences.
This article explains what technical debt is, its harmful effects, common scenarios that generate it, common misconceptions, and practical strategies for managing and repaying technical debt to keep software projects maintainable and cost‑effective.
The article outlines comprehensive quality‑assurance approaches for technical improvement projects—such as large‑scale refactoring, architecture upgrades, and migrations—by emphasizing risk‑driven planning, automated testing, business‑centric reviews, non‑functional requirement validation, and continuous knowledge sharing.
The article outlines comprehensive quality assurance approaches for technical improvement projects, highlighting risk-driven processes, automated testing, business perspective integration, and the importance of addressing non‑functional requirements to ensure stable, reliable system upgrades.
The article explains the concept, purpose, common criteria, necessity, potential risks, side effects, and best‑practice recommendations for using Definition of Ready (DoR) in agile teams, emphasizing that DoR should guide development without becoming an inflexible waterfall‑like gate.
This article explains how DevOps and I&O leaders can overcome fear of chaos engineering by understanding its theoretical roots, addressing core reliability challenges, and adopting a structured, pre‑production "test‑first" approach with practical steps, tools, and community sharing to enhance system availability.
The article analyzes the 2012 Knight Capital Group disaster, showing how a manual deployment error, lingering legacy code, missing kill‑switch, and inadequate monitoring caused a $4.6 billion loss within 45 minutes, and extracts key DevOps best‑practice lessons to prevent similar failures.
The article debunks the myth that agile eliminates planning by showing that even in complex, time‑boxed Scrum projects a flexible, continuously‑refined plan covering scope, cost, schedule, and quality is essential for managing risk and delivering business value.
This article explains how large‑scale graph technology is applied to financial anti‑fraud, covering background, graph‑driven perception, analysis, decision‑making and enforcement, evolution of graph methods, a comprehensive risk‑control platform, and a Q&A on practical implementation.
This article describes the design, construction pipeline, and practical applications of a financial event knowledge graph, covering background challenges, multi‑layer modeling, information‑extraction techniques, and use cases such as institutional risk monitoring, wealth‑management recommendation, and industry‑chain analysis.
This article explains data security fundamentals, the full data lifecycle, the 4A/5A security model, trust‑level goals, and a comprehensive tool framework covering identity authentication, permission control, asset protection, and governance strategies to protect data throughout its lifecycle.
This article explains how graph‑based techniques are used in financial anti‑fraud, covering background, the role of graphs in perception, judgment, decision and disposal, the evolution of graph solutions, a concrete case study, and future outlooks for AI‑enhanced risk detection.
The article details Zhongyuan Bank's comprehensive data security governance, covering the regulatory background, protection objectives, classification of data assets, organizational and procedural management mechanisms, technical safeguards across the data lifecycle, and future planning to enhance compliance and risk mitigation in the banking sector.
This talk explains how to use semantic-driven captcha mechanisms to classify and manage trusted versus untrusted traffic, detailing anti‑fraud strategies, flow identification, countermeasures against simulator and protocol cracking, and proactive updates to stay ahead of black‑market attacks.
The article explains how eBay protects its global payment system using a graph‑neural‑network driven risk management framework called xFraud, which combines heterogeneous graph sampling, node‑type encoding, attention mechanisms and dynamic‑graph extensions to detect and explain both individual and organized fraud patterns in real‑time.
This article presents a comprehensive overview of financial risk management, detailing business challenges such as identity verification and fraud, and describing technical solutions including feature engineering, sample handling, model optimization, and online validation, emphasizing the integration of data-driven AI techniques throughout the process.
This article explains the origin of Java thread pools, outlines their advantages and potential risks such as deadlocks and resource exhaustion, describes their internal states and processing flow, provides guidance on sizing for CPU‑ or I/O‑bound tasks, and reviews the four common thread‑pool implementations.
The article introduces Zhang Ruimin’s “maximum regret principle,” explains its mathematical formulation using regret matrices and utility functions, and demonstrates its application through a concrete investment decision example that shows how minimizing the worst‑case regret leads to robust choices.