Common API Security Pitfalls • Philippe De Ryck • GOTO 2019

From the creator

This presentation was recorded at GOTO Amsterdam 2019. #GOTOcon #GOTOams http://gotoams.nl Philippe De Ryck - Founder of Pragmatic Web Security, Google Developer Expert @philippederyck2572 ABSTRACT The shift towards an API landscape indicates a significant evolution in the way we build applications. The rise of JavaScript and mobile applications have sparked an explosion of easily-accessible REST APIs. But how do you protect access to your API? Which security aspects are no longer relevant? Which security features are an absolutely must-have, and which additional security measures do you need to take into account? These are hard questions, as evidenced by the deployment of numerous insecure APIs. Attend this session to find out about common API security pitfalls, that often result in compromised user accounts and unauthorized access to your data. We expose the problem that lies at the root of each of these pitfalls, and offer actionable advice to address these security problems. After this session, you will know how to assess the security of your APIs [...] Download slides and read the full abstract here: https://gotoams.nl/2019/sessions/810/common-api-security-pitfalls RECOMMENDED BOOKS Aaron Parecki • OAuth 2.0 Simplified • https://amzn.to/2A3IMOf Aaron Parecki • OAuth 2.0 Servers • https://amzn.to/3ecHEsz Aaron Parecki • The Little Book of OAuth 2.0 RFCs • https://amzn.to/3i7qnlC Erdal Ozkaya • Cybersecurity: The Beginner's Guide • https://amzn.to/2T6OIj3 Richer & San

Published 2019-11-08 · Watch on YouTube ↗
Availability and playback restrictions are controlled by the original channel.