OWASP Standard Classification - API Security Top 10 - A Beginner's Guide to Mitigation

Explore the OWASP API Security Top 10 in this 31-minute conference talk by Isabelle Mauny. Gain insights into the rising threat of API breaches and the evolving application architecture landscape. Learn about the risks associated with each of the OWASP Top 10 for API Security, discover practical solutions for risk mitigation, and understand strategies for implementing API security across the entire lifecycle. Delve into real-world examples, including the Parler breach of January 2021, and explore crucial topics such as input and output data validation, avoiding Broken Object Level Authorization (BOLA), and secure logging practices. Equip yourself with the knowledge to address API security concerns in today's rapidly changing digital landscape.

Intro
2. API Breaches are on the rise!
Applications Architecture has changed!
OWASP API Security Top 10
2. Parler (January 2021)
Input Data Validation
Output Data Validation
2 Avoiding BOLA
2. Secure Logging
IN AN API WORLD, IT MEANS
CALL TO ACTION!