Information Security Expert
summary
One single misconfigured endpoint once exposes 500 million records exposed, regulators levy up to $5 billion in fines, and real incidents repeatedly trace back to BOLA (broken object level authorization), broken authentication, excessive data exposure and missing rate limits. Defense relies on inventory, automated testing and runtime controls: use DAST and SAST scanners, API gateways, WAFs, rate limiting, anomaly detection and CI/CD guardrails; run threat modeling, discover shadow APIs (hundreds to thousands uncovered) and shift security left.
AI-written summary · about
chapters (13)
- 0:00API security importance
- 1:05API risks overview
- 3:35OWASP top 10 API vulnerabilities
- 6:04Layered API security approach
- 8:32Multi-layered API security strategy
- 10:42Secure design and automated testing
- 12:28API discovery and inventory
- 14:32Real-time API protection
- 16:40AI-driven API anomaly detection
- 17:23Shift-left security for developers
- 19:53Threat modeling and security checks
- 20:35Documentation governance and risk roadmap
- 21:40Shared responsibility in API security
related talks
30mNavigating the New AI Security Landscape
28mBreaches Are Everywhere; What's a Good Security Leader to Do
24mSecuring the Modern API Ecosystem
26mCloud Security Lessons
40mData Breaches: Barbarians in the Throne Room
39mAPI Security: Acting Now to Enable Security Controls
22mLayered Approach of API Security Strategies and its Business Impact
25mProtecting financial grade API: adopting the right security stack