App Arch: Login API Security — is that you attacking my system?
summary
A developer recounts real-world incidents of attackers using known user passwords to probe and breach login endpoints, showing how they obtain credentials and how login traffic is manipulated. The talk examines specific attack patterns against authentication APIs, the data attackers collect, their motives and outcomes, and describes defensive measures the team implemented plus the importance of team culture in incident response.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 3:11User password security
- 13:39Attack experiences
- 21:20Detecting suspicious activity
- 28:10Automated defense and response
- 36:26Traffic and metrics analysis
- 40:14Attack impact and scale
- 43:37Practical attack prevention
- 46:32Security culture
related talks
30mAttack API Architecture
15mThe evolution of user logins
35mClosing Keynote Day 1 API First Hacking
37mCustomer Identity for Modern Apps and APIs
31mLog In Through the Front Door: Automating Defense Against...
29mSecurity by(e) Design?
25mHow Do They Get In?! Understanding the API Attack Vector
39mAPI Security: Acting Now to Enable Security Controls