Application and Supply-Chain Attacks: How to Keep Using APIs and Sleep Well
summary
An overview of API and supply-chain attacks with statistics on attack vectors, comparing positive (allow-list) and negative (block-list) protection models and their effectiveness. It explains how API security choices affect development speed and describes Webmonitorex’s three-stage hybrid protection approach (combining positive and negative models) and its integration into CI/CD pipelines for high-load systems.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:51API threat evolution
- 7:51API management issues
- 12:08Real incidents and vulnerabilities
- 17:02API security models
- 24:54API maturity stages
- 33:26API security in Russia
- 38:01Practical start steps
- 47:56Q&A
related talks
22mLayered Approach of API Security Strategies and its Business Impact
31mAPI security
26mThe Future of API Security
32mApisecure, 14 & 15 March 2023 - Shannon Wilkinson, Cybersecurity Founder | Women in Technology [...]
20mFrom Chaos to Calm: Navigating Emerging API Security Challenges.
24mSecuring the Modern API Ecosystem
01h 01mApisecure, 14 & 15 March 2023 - Jeremy Ventura, CISO at ThreatX.
24mAPI security, mitigate API abuses using machine learning