Don't Worry, Be API - Addressing AppSec's Modern Challenge

Explore the critical aspects of API security in this 30-minute conference talk delivered by Erez Yalon. Delve into the evolution from traditional to modern applications, understanding what makes APIs vulnerable in today's landscape. Learn about the challenges posed by CI/CD practices and discover the good news in addressing these issues. Gain insights into bridging the security gap and familiarize yourself with the OWASP API Security Top 10, focusing on key vulnerabilities such as Broken Authentication, Broken Object Level Authorization, and Broken Function Level Authorization. Equip yourself with essential knowledge to tackle modern AppSec challenges and secure your APIs effectively.

Intro
What is API
Traditional and Modern Applications
Summary
What makes API vulnerable
CICD
Good News
Bridging the Gap
API Security Top 10
Broken Authentication
Broken Object Level Authorization
Broken Function Level Authorization
Summarize