Apisecure, 14 & 15 March 2023 - Carolina Ruiz, CEO at Brier & Thorn By AI in API Security.
summary
Claims that ChatGPT public release Nov 2022 suddenly enables low-skill attackers to generate weaponizable code, with a demonstrated case of a user-created Python encrypt/decrypt script (Blowfish/Twofish) that could be turned into ransomware. Check Point research shows full infection flows from spearphish-to-reverse-shell and dynamic backdoor creation. Traditional API gateways remain rule/policy based and miss internal-credential abuse and complex behavioral patterns; AI adds near-real-time anomaly/fraud detection and adaptive access control. Recommended vendors mentioned: Salt Security, Wallarm, Ping Identity, Noname.
AI-written summary · about
chapters (7)
- 0:00AI and API security intro
- 1:48AI's cybersecurity impact
- 13:38Traditional API security limits
- 22:06AI for better API security
- 27:46AI tools for API security
- 31:14Adapting to AI threats
- 33:01Q&A
related talks
24mSecuring AI Integration with API's
51mThe Next Application Security Frontier: AI-Ready API Defense
24mDiscussion between Mehdi Medjaoui and Troy Leliard,API Security.
48mAPI Security for Enterprises fireside chat
31mAPI security
23mTraceable AI
26mAPI and Application Security - The Future
21mAttack of the Clones! How AI can boost your API Security!