~/talk

Five Key Trends In Application Security

Talkat OWASP Global AppSec Amsterdam 2019 · on Friday, 2019-09-27· at 14:35· D203, RAI· [security, engineering-leadership]
links:none on file
slides:none on file

Five concrete trends and why they matter: apps move across data centers public and private clouds, perimeter shifts to CDNs and often fragments across multiple CDN vendors; monoliths split into hundreds of externally exposed APIs and microservices; regulation risk rises under GDPR and CCPA when vendors inspect traffic; automated attacks explode — 14 billion leaked credentials, 0.1–0.5% credential stuffing success rates, commodity tools like Sentry MBA with configs sold for $5–$500, and “bulletproof proxies” renting millions of IPs. Recommended fixes: security that moves with apps, API coverage, vendor compliance proof, visibility without heavy instrumentation, and open integrations.

AI-written summary · about

  1. 0:00Introduction
  2. 1:15About Ameya
  3. 1:56Trends Overview
  4. 2:35Trend 1 Journey to the Cloud
  5. 4:49Trend 2 Multiple CDNs
  6. 6:27Trend 3 Proliferation of APIs
  7. 7:33Trend 4 Compliance
  8. 9:05Trend 5 Attack Surface
  9. 12:27Credentials
  10. 12:42Recent Breaches
  11. 13:19Industry
  12. 13:47Tools
  13. 15:01Behavior
  14. 15:28Nike Bot
  15. 16:41Cybercriminal Infrastructure
  16. 17:34Residential IP addresses
  17. 19:10Geo distribution
  18. 21:15Mobile apps
  19. 21:55Account takeover
  20. 23:42Fake account creation
  21. 24:58Content scraping
  22. 27:39Recommendations
  23. 31:36Questions
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.