News Aggregator

Protect Against Log4j Data Exfiltration

Aggregated on: 2021-12-20 10:34:22

We are following developments on the Log4Shell security vulnerability in Apache “Log4j 2" utility (CVE-2021-44228, CVE-2021-45046). We, at Theom, are actively helping multiple enterprises expose the impact of the log4j vulnerability and understand what data has been exfiltrated. We are sharing this post to help the defenders.

Walmart and eBay Electronic Brand Analysis Using SerpAPI

Aggregated on: 2021-12-20 10:34:22

To compare Walmart and eBay, it is noted that eBay is better than Walmart in selling electronics of all brands. And reviews are one of the best factors to consider in stocking products on a selling platform. Let's deep dive into how to use SerpApi to extract, visualize, analyze, and draw conclusions about this data. Requirements: Python 3.x.x VS Code/Jupyter Notebook Import Libraries

4 Benefits of Empowering Your Team’s Security Champions

Aggregated on: 2021-12-20 10:34:22

In today’s software development culture, there is an ever-increasing need for management to drive empowerment within their teams. You need to seek out, identify, and empower someone who can act as your team’s security champion. Find at least one champion to start, and add more if they are available. As you grow, you may even consider assembling a Security Champions team. What Makes a Security Champion? Security champions should have some security background or knowledge of cyber security, as well as being willing, able, and motivated to learn much more. Your champion can be a current team member or a qualified contractor/consultant, he/she has to have a deep knowledge of the team’s goals is necessary. A security champion needs to be a positive person that can offer diligent observations and constructive suggestions to the team.

What is GitOps?

Aggregated on: 2021-12-20 09:49:22

Introduction Solutions that assist teams and companies in speeding up the process of continuous deployment in cloud environments are constantly improving as DevOps continues to gain more popularity. One of the tools that DevOps veterans and novice professionals all know and trust that is behind the growth of DevOps is Git. Essentially, since 2017 when the GitOps movement to manage Kubernetes clusters began, there has been a considerable push for automation of software development. It reduces human error, improves the reliability of software deployment pipelines', and empowers DevOps folks to deploy more, gather better analytical data, and correct errors faster.

How AI Democratization Helped Against COVID-19

Aggregated on: 2021-12-20 09:19:22

AI not only helped in data gathering but also in data processing, data analyses, number crunching, genome sequencing, and making the all-important automated protein molecule binding prediction. AI’s use will not end with the vaccine’s discovery and distribution; it will be used to study the side effects in the billions of vaccinations

How to Check if a Java Project Depends on A Vulnerable Version of Log4j

Aggregated on: 2021-12-20 03:04:22

The Log4j vulnerability tracked as CVE-2021-44228 (also known as Log4Shell) allows an attacker to execute arbitrary code in a system. If your application uses Log4j from version 2.0-alpha1 to 2.14.1, you should update to the latest version (2.16.0 at the time of writing this) as soon as possible. The Swiss government published an excellent diagram that explains the vulnerability:

5 Key Metrics in Test Automation and How to Track Them

Aggregated on: 2021-12-19 22:49:22

Testing is a constant part of product and software development. When you’re writing code for a new product, you need to monitor it as you go along for faults. When your business launches a new piece of software or technical service, you’ll need to keep track of its functionality.

Are You Contributing to a Toxic Work Environment Without Realizing It?

Aggregated on: 2021-12-19 22:04:22

Some of the most toxic managers I have worked with had no clue they were contributing to a toxic work environment. Otherwise pleasant to talk to, these managers seemed to genuinely care about their people. However, what appeared on the outside was not in tune with what went inside their teams. Their good intentions didn’t always translate into the right action. Their behavior was rooted in flawed assumptions about what contributes to toxicity.

Login With Google in Angular Firebase Application

Aggregated on: 2021-12-19 21:34:22

In this article, we will create a sample application to log in with Google in the Angular Firebase application. Firebase provides different login options for making the user authentication process quick. Firebase Sign-In Providers Email/password Phone Google Play games Game Center (beta) Facebook Twitter GitHub Yahoo Microsoft Apple Anonymous In this tutorial, we will mainly focus on Firebase's Google login. If you don't have an understanding of the connection of the Angular app, read my previous article on Firebase.

Beautify Third-Party APIs With Kotlin

Aggregated on: 2021-12-19 18:49:22

Scala has popularized the "Pimp my library" pattern: This is just a fancy expression to refer to the ability to supplement a library using implicit conversions.

Install Home Assistant Onto Your Embedded Linux Device

Aggregated on: 2021-12-19 18:49:22

Pantavisor Linux comes installed with Pantabox which provides all of the tools to configure, install and manage your apps and even the kernel. In this guide, you’ll learn how to flash and boot a Raspberry Pi with Pantavisor Linux and then run Pantabox to configure your device and any apps running on it. You’ll then download and install the Home Assistant, an open-source home automation platform from the Pantacor One Marketplace and display it in your browser. After completing this guide, you may want to try Configuring and Installing Apps from Docker Hub where we dive a little deeper and describe how to use configuration overlays and a number of other features of Pantavisor Linux.

Appsmith Basics: How to Query Databases and Bind Data to Widgets

Aggregated on: 2021-12-19 18:19:22

Every application involves some level of CRUD operations, be it reading records from a database, creating or updating records, or deleting records. All of which is put together by well-designed application UI and logic. In this article, I will show you how to build a task manager in Appsmith using Firestore as the database. By doing this, we will cover and solidify core concepts like connecting to databases, writing queries, infusing data to widgets, and writing custom functionality using JavaScript.

BizTalk Server 2020 Introduction

Aggregated on: 2021-12-19 18:19:22

Introduction Microsoft BizTalk Server 2020 is one of the world's leading integration tools, with full support for newly released features. On January 15, 2020, Microsoft announced the release of BizTalk Server 2020. The whole community was excited to see the new set of features that were shipped in this release, it's the beginning of a new era! What Are the New Features? There are many new features released with BizTalk Server 2020, let’s have a look at some of them:

BizTalk Server Administration Error: Troubleshooting and Solving

Aggregated on: 2021-12-19 17:49:22

Introduction I recently encountered an error during some troubleshooting related to BizTalk. The was new to me and I wanted to share the solution with the community. So, in the future, if anyone faces this issue then they can try this option as well. When I was trying to expand the applications, the below error popped up and it was failed to load the applications.

CVE-2021-44228: Log4j2 Exploitability and Attack Path Mitigation

Aggregated on: 2021-12-19 17:49:22

Quick Overview The gravest cyber threat of modern times is upon us in the form of CVE-2021-44228. Here are some key resources: CVE-2021-44228: Apache Log4j <=2.14.1 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints. Severity: Critical Base CVSS Score: 10.0 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Versions Affected: all versions from 2.0-beta9 to 2.14.1 Apache Security Advisory Digging deeper into Log4Shell Which services, vendors, and components are affected? A huge number of exploits and variations of payloads are reported, Cloudflare is tracking it here. How to Protect Your Organization: Measure Your Exposure and Enumerate Attack Paths In order to quickly find and prioritize how at risk you are of a Log4j 2 exploit, you can focus on enumerating the virtual machines and pods which are directly and indirectly exposed to the internet. We used ThreatMapper to detect our own exposure caused by Elasticsearch (which has since been fixed) as follows. Dogfooding much!

Why Use gRPC and Thrift for Remote Procedure Calls

Aggregated on: 2021-12-19 17:49:22

Usually, whenever somebody wants to start building an HTTP API for their website, they pretty much exclusively use REST as the go-to architectural style. They prefer REST to alternative approaches such as RPC and GraphQL. REST works well for most cases, especially if you build a monolithic application that does not have complex within-application communication. The problems come when you build an application that consists of dozens of backend services regularly communicating with each other. An example of such architecture can look like this.

5 Tangible Metrics for the Speed of Software Engineering Teams

Aggregated on: 2021-12-19 17:49:22

Introduction Firstly, since we want to discuss the topic of metrics, what does it mean for a software engineering team to perform well anyway? For the purpose of this post let us take the following metrics for a given software engineering team as the fundamental one: Speed of development (try to maximize) Number of bugs (try to minimize) This model is clearly over-simplified, however, in favor of keeping this post brief, we will use it in this writing. Furthermore, we are concentrating on the technical perspective here. Alignment of business and engineering is crucial for success, however, it is a topic for another post.

Overcoming 5 Challenges to Shifting AppSec Left

Aggregated on: 2021-12-19 17:19:22

Digital transformation and the speed at which applications are developed and deployed is moving at a rapid pace. Businesses have always competed to see who can be the first to respond to customer needs, mainly in hopes of capturing some of a competitor’s market share. DevOps and the cloud have enabled software development to move from the annual updates of yesteryear to shipping releases daily to what we now call continuous delivery (CD). Unfortunately, the security industry has fallen behind in its ability to keep pace with modern developer teams in many ways. It may be more accurate to say security was left behind. As developers assumed ownership of applications through development and operations, security was left in a silo — a gatekeeper expected to review code, find vulnerabilities, and send the results back to the developer team for remediation.

Showcase 3D Museum Exhibits and Audio Guides

Aggregated on: 2021-12-19 17:04:22

3D technology is developing fast, and more and more museums rely on such technology to hold online exhibitions, opening up history to more people. Users can immerse themselves in online exhibitions through themed virtual environments, stunning lighting effects, and exhibit models that can be enlarged and shrunk, so that visitors can view every detail. On top of this, such exhibitions also feature background music (BGM) and audio guides, providing background to each exhibit. Here is a virtual exhibit that showcases a high level of realism.

Database Migration to Azure for PostgreSQL

Aggregated on: 2021-12-19 17:04:22

PostgreSQL has been an extremely popular open-source relational database management system for a long time. Following the long-term trend of migration to SAAS platforms, many organizations choose the Azure cloud since it provides rich infrastructure including more than 200 applications. That is why database migration to Azure for PostgreSQL is a reasonable choice. This article explores basic approaches to three types of migration:

Extending Apache SkyWalking With Non-Breaking Breakpoints

Aggregated on: 2021-12-19 17:04:22

Non-breaking breakpoints are breakpoints specifically designed for live production environments. With non-breaking breakpoints, reproducing production bugs locally or in staging is conveniently replaced with capturing them directly in production. Like regular breakpoints, non-breaking breakpoints can be:

Questions to Ask When Choosing a Low-Code/No-Code Platform

Aggregated on: 2021-12-19 16:34:22

Current and future app creation is and will be driven by low-code/no-code development platforms (LCDP). Organizations moving forward with low-code development are doing so because they have investigated and understood the benefits. The list of benefits is substantial, from agility to lower development costs to decreased time to market to increased sales and market share. How does a company choose which LCDP for future app development? If a company is seeking a new ERP application, they first create a Request for Proposal, sometimes called a Request for Quote. The RFP is filled with information about application content requirements followed by questions focusing on the supplier and the features offered by their unique applications. The questions center on how the provider's solution matches the customer’s requirements; about the proposed new application's cost plus the support and modification costs; the functions and unique features the solution will provide; it asks about the user interface along with whether the new application will allow for the integration of legacy programming code and data; the buyer wants to know what technologies are used and tons more. I have yet to see an RFP for the selection of a LCDP provider.

9 Popular React UI Component Libraries for Beginners in 2022

Aggregated on: 2021-12-19 15:49:22

Did you know that according to the survey, 40.14 percent of respondents reported using React.JS, while 34.43 percent were using jQuery? Needless to say, React.js is the most used framework among developers. React powers the user interfaces (UI) of approximately 10 million websites across the internet. Since the base library of React is rigid, there are various component libraries topped up by valuable design elements for your React applications or web/mobile development projects. Before getting into the React-based UI component libraries, let’s first flick through the advantages of those libraries which will answer your question of why you should go for them in the first place:

Is the MariaDB JDBC Driver Affected by the Log4j Vulnerability?

Aggregated on: 2021-12-19 15:04:22

Is the MariaDB Java connector affected by the security vulnerability recently discovered in Log4? By default, the Java connector does not use Log4j. However, if you have configured it to use SLF4j, keep reading. For information beyond the scope of the MariaDB JDBC driver, read Log4Shell and MariaDB.

Why Develop a Decentralized Application Architecture for Cloud-Native, API-centric, and Microservices Patterns

Aggregated on: 2021-12-19 15:04:22

This article is outlining the cell-based architecture, which was published as an open specification on GitHub summer-2018. Our approach creates a pragmatic and technology-neutral reference architecture that addresses the requirement for agility. It can be instantiated to create an effective and agile method for digital enterprises, deployed in private, public, or hybrid cloud environments. When I present the new architecture at technology events, one common question is the reason we are defining a new reference architecture in an already crowded market. This article lists the motivating factors.

Why PHP Is More Hated and Popular Than Ever Before

Aggregated on: 2021-12-19 14:04:22

Once again, I resist the accepted standards of pop culture to confirm what is happening in reality. But many readers of my writing will not want to hear me. Today I confirm that PHP is the illegitimate child of programming languages, and it is getting more and more popular every day! What is the reason for the popularity? Why isn't this programming language dead already? Are you sure you can find something much “better” among the programming languages?

How Do Open Data Servers and Databases Help Optimize Performance in FinTech

Aggregated on: 2021-12-19 13:34:22

Data is a piece or a large amount of information stored electronically. With so much information stored in different folders, this separation of data makes data storage inconsistent and tedious to access, edit, or replace. That’s exactly where servers or databases come into the picture. With complex data and numbers pouring in on a daily basis, having a strong database or servers is crucial to managing it. A database is nothing but a collection of information in a structured way to allow for prompt readability, access, and editing. It is the center of the flow of data, as data flows from the database to other parts of the system.

API Security Beginner's Guide

Aggregated on: 2021-12-19 12:34:22

Historial API Evolution As per the documented history, the occurrence of web APIs transpired towards the end of 1990 with the launch of Salesforce's sales automation solution. At that point in time, it was an open resource, awarded to everyone. Salesforce's automation tool was XML-driven and the format used for interchanging the data for this tool later got acknowledged as standard SOAP API. It featured message format specifications and encoding-specific rules related to allowing or disallowing requests.

IBM MQ in ECS on AWS Fargate

Aggregated on: 2021-12-19 10:49:22

AWS Fargate is a serverless compute resource specifically designed for running containers. With AWS Fargate the deployment and management of the container(s) are controlled by either Elastic Container Service (ECS) or Elastic Kubernetes Service (EKS). Initially, users often get confused by the relationship between Fargate and the container management solution (EKS or ECS). Therefore, I want to labor the point of the difference, when deploying a container within the context of an enterprise, any solution will include two components:

Develop Spring Boot REST API in AWS - Part 2: ECS Cluster

Aggregated on: 2021-12-19 09:49:21

It is the second part of our video tutorial series where we continue to explore developing spring boot REST API on AWS. Today, we will focus on the ECS cluster. It involves the following steps:

DIY Serverless with Hyperlambda, Kubernetes and pure Magic

Aggregated on: 2021-12-19 09:49:21

It always bothered me that in order to implement horizontal scaling in Magic, I had to arguably kill its most important feature; Its dynamic Hyperlambda file system. Sure, I could duplicate the same Hyperlambda files, create a Docker image, and spawn up 50 Kubernetes PODs having an identical "modules" folder - But then I would lose Magic's primary feature, being its ability to dynamically change modules on the run, without interrupting normal usage, having the same changes duplicated automatically to all 50 PODs. Well, as of version 10.0.5 of Magic, this is no longer a problem - At least in theory. Simply because now Magic no longer directly reads files from the file system, but exclusively consumes dynamic "files" through four interfaces, completely abstracting away all IO of Hyperlambda files, and any other dynamic files may I add. These interfaces are as follows.

Going Beyond Java 8: Local Variable Type Inference (var)

Aggregated on: 2021-12-19 09:49:21

According to some surveys, such as JetBrains's great survey, Java 8 is currently the most used version of Java, despite being a 2014 release. What you are reading is one in a series of articles titled 'Going beyond Java 8,' inspired by the contents of my book, Java for Aliens. These articles will guide you step-by-step through the most important features introduced to the language, starting from version 9. The aim is to make you aware of how important it is to move forward from Java 8, explaining the enormous advantages that the latest versions of the language offer.

Top 6 PHP Development Tools You Can Adopt in 2022

Aggregated on: 2021-12-19 09:04:21

Hypertext Preprocessor, also known as PHP, is one of the flourishing and widely used platforms for building websites and web applications. It is created by applying the scripting language of the server. As a result, PHP is one of the fastest and most widely used platforms. Furthermore, PHP is one of the best languages because of its efficiency. The development platform is fast and easy to use compared to let's say Python or Ruby.

Importance of Learning Java for Cybersecurity

Aggregated on: 2021-12-19 01:49:22

As a new generation of threats pop-up, Java has become one of the most-used programming languages for applications, including cybersecurity. If you’re into application development, you’ll know that Java is ubiquitous for daily use. Knowing the language can be useful for a career in cybersecurity. With that said, it’s vital to learn not only how to read and program Java but also its value in the field of cybersecurity. This will allow you to get one step ahead of hackers and other malicious parties. Here’s why learning Java is a crucial step for cybersecurity.

4 Pitfalls To Be Aware of When Adopting a Hybrid Cloud

Aggregated on: 2021-12-19 01:19:21

Companies making a beeline for cloud services is old news. The Flexera State of the Cloud Report 2021 revealed that the average company’s IT infrastructure setup already runs five different cloud mechanisms on which their data transfer, computing, and networking take place. This means companies are already exposed to a combination of on-premises servers, public and private clouds. Cloud industry leaders, on being asked how they pulled off their move to the hybrid cloud in a survey by 451 Research, shared some interesting information:

To Enable DevOps, Enterprises Need Autonomous Multi-Cloud Networking

Aggregated on: 2021-12-18 23:34:21

Every industry is going through a rapid transformation to deliver new digital services for employees, partners, and customers that improve operational efficiency, customer experiences and create competitive advantages. To enable this, enterprises are building DevOps teams that leverage cloud-native architectures to modernize application frameworks with microservices and containers. This is also driving the adoption of cloud computing services, as monolithic infrastructure approaches cannot keep up with the speed and scale that enterprises now require. This creates a new paradigm for enterprises, as DevOps need to quickly and reliably build, test, and distribute applications that are fast, secure, and in compliance. This fact has created the need for autonomous multi-cloud networking that brings alignment to disparate teams.

Systems Observability

Aggregated on: 2021-12-18 20:34:21

What Is Observability? According to Wikipedia: "Observability is a measure of how well internal states of a system can be inferred from knowledge of its external outputs. In control theory, the observability and controllability of a linear system are mathematical duals." In simple words, it is how the system describes its internal state through its external outputs.

How to Vaults and Wallets for Simple, Secure Connectivity

Aggregated on: 2021-12-18 19:49:21

This is the third in a series of blogs on data-driven microservices design mechanisms and transaction patterns with the Oracle converged database. The first blog illustrated how to connect to an Oracle database in Java, JavaScript, Python, .NET, and Go as succinctly as possible. The second blog illustrated how to use that connection to receive and send messages with Oracle AQ (Advanced Queueing) queues and topics and conduct an update and read from the database using all of these same languages. The goal of this third blog is to provide details on how to secure connections in these same languages as well as convenience integration features that are provided by microservice frameworks, specifically Helidon and Micronaut. When making secure connections to Oracle databases there are two items to consider, the wallet and the password. We will discuss and provide examples of both in this blog.

Visualize Attack Paths in Production Environments With ThreatMapper

Aggregated on: 2021-12-18 19:49:21

The huge advances in 'Shift Left' processes makes it possible to deliver code to production that is secure and largely free from vulnerable dependencies. Among other things, these processes typically involve matching dependencies against public vulnerability lists from Mitre, Red Hat, Debian, and other projects. 'Shift Left' Scanning Alone Does Not Go Far Enough to Identify Production Vulnerabilities Vulnerability lists don’t stand still. CVEs are published through the NVD at a rate of about 50 per day, so the risk of a new vulnerability being found in production is significant. Furthermore, third-party production components may not be scanned in a way that is as rigorous or up-to-date as you would like.

Tarantool: The Other Queue Always Moves Faster

Aggregated on: 2021-12-18 19:19:21

If you don't use queues, you might just not know how to do it right. But before learning about queues, it is necessary to figure out what they are in general and where they are applied. For most systems, it is enough to process 10,000 or fewer requests per second, which any broker can provide. If you need more, you'll have to dive deep into the queues. This article discusses what queues are, why they are needed, and how they work. I'll base my explanations on several use cases and describe a variety of solutions. I'll outline the most common problems and how to avoid them. We'll also cover the differences between brokers, their pros and cons, and find out what's best for your purposes.

The Impact of Blockchain Technology on Influencer Marketing

Aggregated on: 2021-12-18 19:19:21

Image by Pete Linforth from Pixabay Three years ago, Facebook (now Meta Platforms) announced a policy banning crypto advertisers from using its platform. The policy was lifted six months later but at the time, the future remained vague about how to integrate blockchain technology into social media marketing and advertising.

How to Compute the Betweenness Centrality Against Nebula Graph

Aggregated on: 2021-12-18 18:49:21

Betweenness Centrality (BC for short) reflects the significance of vertices in the entire network. This article will introduce how to compute Betweenness Centrality against Nebula Graph. Relevant Concepts Centrality represents how central a vertex is in the entire network graph, including Degree Centrality, Closeness Centrality, and Betweenness Centrality, etc. Degree Centrality reflects the popularity of a vertex by counting the number of its incoming and outgoing edges, while Closeness Centrality computes the sum of the length of the shortest paths between a vertex and all other vertices in the graph. Thus, the more central a vertex is, the closer it is to all other vertices.

Hardening DevSecOps With Domain Data Security and CircleCI

Aggregated on: 2021-12-18 18:19:21

DevSecOps is an abbreviation for development, security, and operations. It’s an approach to software development that encourages the inclusion of security as a shared responsibility throughout the software development lifecycle. Simply put, DevSecOps means integrating security into the application development process from start to finish. Having “built-in security” in the DevOps process means implementing security best practices in both code and infrastructure, and automating the security testing process.

CakePHP Translation: Agile Localization for Devs

Aggregated on: 2021-12-18 18:04:21

CakePHP is a web framework for PHP which uses commonly known design patterns. It is generally used for handling web applications, the huge library support in CakePHP makes the development clear and easy. In this article, you will discover CakePHP translation basics, how to keep the localization process agile and easily manage the translation of constant app updates.

Fixing a SOLR Memory Leak

Aggregated on: 2021-12-18 17:49:21

In this blog, we are going to learn about memory leaks occurring in SOLR QueryResultCache, how the RCA was carried out, and the solution given to resolve the issue. In the application under test, SOLR was used as a component to store, search, and retrieve the contents. SOLR 7.5 was used in this application. While conducting the performance testing, it was observed that the SOLR Slave CPU was increasing constantly for every test as given below:

How to Refactor a Legacy Test Automation Project

Aggregated on: 2021-12-18 17:34:21

Starting a new project can put you in a situation where you have to decide whether to begin again or try to fix what you have. If all the tests work and are written in a simple, SOLID, and understandable manner, you are lucky — you are lucky!

Hardening Your Kubernetes Cluster: Guidelines (Part 2)

Aggregated on: 2021-12-18 17:34:21

The NSA and CISA recently released a guide on Kubernetes hardening. Now that we explored the Threat Model and had a refresher on K8s components (see the first part), let's dive into the recommendations of the Hardening Guidance. 1 Pod Security Pods are the smallest deployable Kubernetes unit and consist of one or more containers. Pods are often a cyber actor's initial execution environment upon exploiting a container. For this reason, Pods should be hardened to make exploitation more difficult and to limit the impact of a successful compromise.

eBPF: Observability with Zero Code Instrumentation [Video]

Aggregated on: 2021-12-18 17:04:21

Current observability practice is largely based on manual instrumentation, which requires adding code in relevant points in the user’s business logic code to generate telemetry data. This can become quite burdensome and create a barrier to entry for many wishing to implement observability in their environment. This is especially true in Kubernetes environments and microservices architecture. eBPF is an exciting technology for Linux kernel-level instrumentation, which bears the promise of no-code instrumentation and easier observability into Kubernetes environments (alongside other benefits for networking and security).

Angular Lifecycle Hooks

Aggregated on: 2021-12-18 17:04:21

The angular application goes through a whole arrangement of cycles or has a lifecycle right from its introduction to the furthest limit of the application. The portrayal of lifecycle in pictorial portrayal is as follows, The description of each lifecycle method is as below,

Data Structures in SQL: The Definitive Guide

Aggregated on: 2021-12-18 16:34:21

Data structures designate different ways of storing data on a computer and form a vital part of any system or database design. The operations that you can perform on these data structures and the instructions you give to execute them, called algorithms, often have their essential functions tailored to the design of the data structure. Let's look at the importance of data structures and discuss their use in SQL databases. Where Are Data Structures Used? Apart from storing created data for data persistence, data structures also enable Core OS services and resources. For example, memory allocation, file directory management, and process scheduling can be done via linked lists, trees, and queues, respectively.