Amirhossein Aliakbarian is an Application Security Engineer with more than 15 years of experience in IT, from network design and hardware repair to AI, algorithm, and software development. Before joining Booking.com, part of the Booking Holdings family of brands, he worked in a leading Cybersecurity company, as well as serving as a lecturer and research assistant at the Sharif University of Technology, where he also got his Master of Science in CyberSecurity. 

During the last few years, he has had two main focus areas: application security and anomaly detection in CyberSecurity. 

To log, or not to log! That is the question

There is no (set of) security control(s) that can provide complete safety to a software ecosystem. So, incidents can still happen. That is one of the main reasons for having a history of events in the ecosystem, to be able to track them and find the root causes. But can you just log everything, especially when you are talking about 200,000,000+ requests per hour, including sensitive information, while still keeping it usable? Let’s find out the answer together!