The Real World, API Security Edition
summary
Recommends replacing Word docs with machine formats like OpenAPI/OAS for continuous discovery, tagging services for traceability, and not relying on gateway filters alone because they overload and miss attacks; cites TripActions losing inventory, Finastra facing global attackers that evade rate limits, and AppsFlyer needing stitched timelines. Describes a traffic‑collection platform using machine learning and a patented context-based API analysis architecture to detect credential stuffing, map APIs, stop attacks, and feed actionable signals to SOCs.
AI-written summary · about
chapters (19)
- 0:00Intro
- 0:40Agenda
- 1:44Theme
- 2:05API Security Prediction
- 3:27Documentation Discovery Cataloging
- 4:03Machine Formats
- 5:35Tags and Labels
- 8:08Threat Protection
- 10:40Rate Limiting
- 12:46Finastra
- 14:10Security Operations
- 18:56AppsFlyer
- 19:06How are they handling SOCs
- 19:45How do they do things
- 20:18Machine Learning AI
- 20:41API Protection Platform
- 21:32Resources
- 22:04Salt Labs
- 22:25QA
related talks
31mAPI security
48mAPI Security for Enterprises fireside chat
32mApisecure, 14 & 15 March 2023 - Shannon Wilkinson, Cybersecurity Founder | Women in Technology [...]
22mLayered Approach of API Security Strategies and its Business Impact
17mAPI Security Simplified: Practical Tips & Tools
01h 01mApisecure, 14 & 15 March 2023 - Jeremy Ventura, CISO at ThreatX.
33mImproving API Security Posture.
19mAvoid These API Security Pitfalls: Expert Insights