Skip to content

Instantly share code, notes, and snippets.

@auxesis

auxesis/apidays 2022 talk proposal.markdown

Created August 4, 2022 13:52
Show Gist options
  • Save auxesis/3984eae422d3484cece328caf8bc24f6 to your computer and use it in GitHub Desktop.
Save auxesis/3984eae422d3484cece328caf8bc24f6 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
apidays 2022 talk proposal.markdown

Your API ain't as secure as you think

Preparing for the next 5 years of threats, today

The Bad News:

Last year OWASP published a new top 10, with some surprising changes. Broken access control rocketed from #5 to #1, and cryptographic failures moved up from #3 to #2.

Data breaches are costing organisations more than ever. According to IBM, the average cost of a data breach has climbed 12.7% since 2020.

APIs are at the centre of many of these attacks. Either through misuse or exploitation by attackers.

The Good News:

There are architectural approaches that give you new techniques to manage data security risk. These help you separate concerns, divide risk, and defend smaller attack surfaces.

There are also old techniques getting new life due to new breakthroughs in adjacent technologies.

In this talk, attendees will learn:

  • What the hidden security traps are when handling data in your APIs
  • What architectural approaches you can start iterating towards, to prepare you for the next 10 years
  • What techniques you can use today to improve data security in your APIs
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment