Name: Open Banking: Trends, Challenges, and Opportunities
Start: 2022-01-19T14:00:00Z
End: 2022-01-19T14:58:13.000Z
Location: BrightTALK

F5 application services ensure that applications are always secure and perform the way they should—in any environment and on any device. 

F5 EMEA hosts webinar series on the latest IT industry trends around app services and security, so please stay tuned to this channel to get the latest information.  
 
To learn more about F5, visit f5.com or follow @F5_EMEA on Twitter.

Security Misconfiguration is a major source of cloud breaches. Learn what to do and avoid—as modern app development, software re-use, and architectural sprawl across clouds increases this risk. 
 
Protect Your Web Apps from New and Critical Risks 

The OWASP Top 10 is a broad consensus about the most critical security risks to web applications. The 2021 update gives guidance to help secure modern web applications and architectures from exploits, abuse, and misconfiguration, as well as recommendations for mitigating new risks involving software supply chains, CI/CD pipelines, and open source software. 
 
Watch the 2021 OWASP Top 10 Lightboard Lesson series for a breakdown of the new OWASP Top 10 and learn: 

• How OWASP creates its Top 10 list of the most critical security risks to web applications. 
• Key changes for 2021, including recategorization of risk to align symptoms to root causes. 
• When each risk can manifest, why it matters, and how to improve your security posture. 

The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. OWASP maintains a variety of projects, including the Top 10 web application security risks standard awareness document for developers and security practitioners. 

Watch the other episodes of the series – linked below.

By watching this lightboard session, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

2021 OWASP Top 10: Security Misconfiguration - Ep 5

In this session, we’ll explore how F5 mitigates automated traffic and how, with different tools in our toolbox, how do we rationalize which offering is best for our customers.

F5 Distributed Cloud Bot Defense Vision in Action

Security needs to be inherent to applications. A secure design can still have implementation defects leading to vulnerabilities. An insecure design can’t be fixed by perfect implementation. 
 
Protect Your Web Apps from New and Critical Risks 

The OWASP Top 10 is a broad consensus about the most critical security risks to web applications. The 2021 update gives guidance to help secure modern web applications and architectures from exploits, abuse, and misconfiguration, as well as recommendations for mitigating new risks involving software supply chains, CI/CD pipelines, and open source software. 
 
Watch the 2021 OWASP Top 10 Lightboard Lesson series for a breakdown of the new OWASP Top 10 and learn: 

• How OWASP creates its Top 10 list of the most critical security risks to web applications. 
• Key changes for 2021, including recategorization of risk to align symptoms to root causes. 
• When each risk can manifest, why it matters, and how to improve your security posture. 

The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. OWASP maintains a variety of projects, including the Top 10 web application security risks standard awareness document for developers and security practitioners. 
 
Watch the other episodes of the series – linked below 

By watching this lightboard session, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

2021 OWASP Top 10: Insecure Design - Ep 4

In the hypercompetitive digital market, consumers have many choices at their fingertips—the ability to quickly login, research, and transact is a key competitive advantage. But for typical B2C web applications, up to 30% of legitimate users struggles to successfully login. Friction in login immediately converts to loss in revenue. In this session, we’ll explore the tension between friction-free consumer experiences and application security that can lead to less than ideal choices that directly impact business outcomes.

Increase Revenue by Removing Login Friction in E-Commerce

The nature of 5G and edge compute architectures are forcing telecom operators to transform into IT companies. Some operators are planning to deploy different cloud platforms for their 5G core, edge computing, and private cloud needs commonly referred to as the vertical stack approach.    Another approach is a horizontal stack in which the underlying cloud platform is completely decoupled from the IT and telco workloads. In this model, the different business domains are all consumers of a shared underlying telco cloud platform.    By attending this session you will...   - Learn about the benefits of a horizontal stack approach and how it applies to 5G and edge computing architectures   - Find out how Red Hat OpenStack and OpenShift are the foundations of a horizontal stack   - Understand how F5 can manage and secure both IT workloads (apps) as well as telco workloads (VNF, CNF) running on top of Red Hat horizontal cloud platform     By watching this podcast, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

Deploying a Horizontal Telco Cloud for 5G and Edge with Red Hat and F5

Injection is a broad class of attack vectors where untrusted input alters app program execution. This can lead to data theft, loss of data integrity, denial of service, and full system compromise. Injection is no longer the top risk, but still formidable. 
 
Protect Your Web Apps from New and Critical Risks 

The OWASP Top 10 is a broad consensus about the most critical security risks to web applications. The 2021 update gives guidance to help secure modern web applications and architectures from exploits, abuse, and misconfiguration, as well as recommendations for mitigating new risks involving software supply chains, CI/CD pipelines, and open source software. 
 
Watch the 2021 OWASP Top 10 Lightboard Lesson series for a breakdown of the new OWASP Top 10 and learn: 

• How OWASP creates its Top 10 list of the most critical security risks to web applications. 
• Key changes for 2021, including recategorization of risk to align symptoms to root causes. 
• When each risk can manifest, why it matters, and how to improve your security posture. 

The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. OWASP maintains a variety of projects, including the Top 10 web application security risks standard awareness document for developers and security practitioners. 
 
Watch the other episodes of the series – linked below 

 By watching this lightboard session, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

2021 OWASP Top 10: Injection - Ep 3

Watch F5 senior leaders and Heavy Reading Research Director Jim Hodges discuss the evolution to cloud-native network functions (CNFs) during this on-demand webinar.

CNFs address multiple pain points to reduce CapEX and OpEX costs and unify cloud infrastructure to support both Telco and IT workloads. The webinar highlights two key use cases for Gi LAN consolidation for VNFs and CNFs, and 5G Core Kubernetes security.

In this webinar you will learn about three drivers we're seeing behind customer requests for CNFs:

- Optimizing the 4G infrastructure while designing for 5G
- Efficiency and control through cloud-native network functions
- Edge as the perfect opportunity to build CNFs from the ground up

 By watching this podcast, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

The Time Is Now to Add Cloud-Native Network Functions for Both 4G and 5G

E-Commerce retailers drive business through limited-time offers. As criminals have realized that bots are faster than real customers, they have devised clever new ways to exploit these offers to their advantage. Join this session to dig into these exploits with the data scientists who protect against them for the world’s leading retailers.

Just Enough Time for Crime: Limited-Time Offers in E-commerce

5G networks are leveraging many of the concepts successfully used by the largest websites on the planet, including a containerised, microservices architecture orchestrated with Kubernetes. However, IT-centric Kubernetes has some inherent limitations that make it challenging for telco use cases, such as limited protocol support, scaling issues, lack of visibility, and limited networking capabilities.    In addition, many service providers have still not yet realised the promised commercial and operational benefits when moving from proprietary hardware to a virtualised architecture. This becomes critical as 5G accelerates the deployment of edge computing architectures.    New edge platforms can simplify the management of highly distributed Kubernetes clusters, enabling new network functions and edge applications.    In this session you will learn:   - What's missing in Kubernetes today to support telco use cases   - Solutions that address these shortcomings   - How to manage distributed edge architectures based on Kubernetes   - How to avoid repeating the mistakes of NFV   For related resources, click the Attachments button under the video.    By watching this podcast, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

Making 5G a Success with Kubernetes – All the Way to the Edge

2021 OWASP Top 10: Cryptographic Failures - 02 

Cryptographic failures, previously known as "Sensitive Data Exposure", lead to sensitive data exposure and hijacked user sessions. Despite widespread TLS 1.3 adoption, old and vulnerable protocols are still being enabled. 
 
Protect Your Web Apps from New and Critical Risks 

The OWASP Top 10 is a broad consensus about the most critical security risks to web applications. The 2021 update gives guidance to help secure modern web applications and architectures from exploits, abuse, and misconfiguration, as well as recommendations for mitigating new risks involving software supply chains, CI/CD pipelines, and open source software. 
 
Watch the 2021 OWASP Top 10 Lightboard Lesson series for a breakdown of the new OWASP Top 10 and learn: 

• How OWASP creates its Top 10 list of the most critical security risks to web applications. 
• Key changes for 2021, including recategorization of risk to align symptoms to root causes. 
• When each risk can manifest, why it matters, and how to improve your security posture. 

The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. OWASP maintains a variety of projects, including the Top 10 web application security risks standard awareness document for developers and security practitioners. 
 
Watch the other episodes of the series. – linked below

2021 OWASP Top 10: Cryptographic Failures - Ep 2

A challenge that many organisations face today is the ability to scale out their application delivery infrastructure to accommodate a short-term, unforeseen, or planned increase in traffic and users. Scaling out doesn’t have to take days or weeks, nor does it have to be a tedious time-consuming process. Automation is the key to simplifying the scaling process and making it repeatable. 

In this session, you can learn how infrastructure as a code can help you seamlessly scale up your application delivery infrastructure to unparalleled levels. Through use cases, we’ll show how you can:

• Leverage HashiCorp Terraform to deploy your app delivery infrastructure across multiple clouds 
• Utilise declarative API interfaces to help provision and configure your infrastructure more efficiently 
• Automatically configure services through service discovery 

Watch the other episodes of the series: 

Ep 1: Modernising and Securing Your API Architecture 
Ep 2: Multi-layer App Security in Kubernetes for DevSecOps 
Ep 3: How Smarter Bot Mitigation with Machine Learning Can Reduce Business Risks and Costs 
Ep 4: Why You Need Observability Beyond Monitoring Apps 
Ep 5: Top 5 Pitfalls to Avoid in Client-Side Security 

By watching this webinar, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

Ep 6 - Scaling Your App Delivery Infrastructure in Minutes not Days

5G is becoming a reality as several deployments have already started and more are to come this year. With 5G, service providers will be able to offer new services to new types of devices.    In order to achieve this, service providers have to rethink their network architectures and operational models. They need to be able to deploy both network functions and application services closer to the end users and also follow an agile model with time-limited use cases.    In this session, we’ll cover:   - Challenges and complexity of deploying new network architectures   - Options available today for simplifying the deployment of these architectures   - Examples of enhanced services a provider can offer based on new architectures    By watching this podcast, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

Simplifying Deployment of 5G Functions and Distributed Apps at the Telco Edge

94% of tested apps showed some form of broken access control. Failures can result in unauthorized disclosure, modification or destruction of data, privilege escalation and lead to account takeover (ATO), data breach, fines, and brand damage. 
 
Protect Your Web Apps from New and Critical Risks 

The OWASP Top 10 is a broad consensus about the most critical security risks to web applications. The 2021 update gives guidance to help secure modern web applications and architectures from exploits, abuse, and misconfiguration, as well as recommendations for mitigating new risks involving software supply chains, CI/CD pipelines, and open source software. 
 
Watch the 2021 OWASP Top 10 Lightboard Lesson series for a breakdown of the new OWASP Top 10 and learn: 

• How OWASP creates its Top 10 list of the most critical security risks to web applications. 
• Key changes for 2021, including recategorization of risk to align symptoms to root causes. 
• When each risk can manifest, why it matters, and how to improve your security posture. 

The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. OWASP maintains a variety of projects, including the Top 10 web application security risks standard awareness document for developers and security practitioners. 
 
Watch the other episodes of the series linked below. 
 
By watching this lightboard session, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

2021 OWASP Top 10: Broken Access Control - Ep 1

As you secure your applications and protect them from security breaches and fraud events, you've likely turned to preventative and detective controls on the server side. 

On the other hand, client-side threats such as malicious JavaScript, formjacking, data exfiltration, digital skimming, and Magecart make up a significant portion of attacks across all industries. Those attacks can lead to customer data theft, regulatory scrutiny, compromised user experience, lack of trust, stuck sales cycles, and revenue loss. 

In this session, we'll explore the challenges involved in client-side security. We'll cover: 

• The complexities and challenges involved in client-side security 
• How enterprises can avoid common pitfalls when addressing client-side security 
The benefits of looking at the client-side environment to mitigate risk 

Watch the other episodes of the series: 

Ep 1: Modernising and Securing Your API Architecture 

Ep 2: Multi-layer App Security in Kubernetes for DevSecOps 

Ep 3: How Smarter Bot Mitigation with Machine Learning Can Reduce Business Risks and Costs 

Ep 4: Why You Need Observability Beyond Monitoring Apps 

Ep 6: Scaling Your App Delivery Infrastructure in Minutes not Days 

By watching this webinar, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

Ep 5 - Top 5 Pitfalls to Avoid in Client-Side Security

John starts out explaining what the OWASP Top 10 is. He highlights themes like risk re-orientation around symptoms and root causes, new risk categories, and modern application architectures. Follow along for a video on each of the Top 10 risks. 
 
Protect Your Web Apps from New and Critical Risks 
The OWASP Top 10 is a broad consensus about the most critical security risks to web applications. The 2021 update gives guidance to help secure modern web applications and architectures from exploits, abuse, and misconfiguration, as well as recommendations for mitigating new risks involving software supply chains, CI/CD pipelines, and open source software. 
 
Watch the 2021 OWASP Top 10 Lightboard Lesson series for a breakdown of the new OWASP Top 10 and learn: 

• How OWASP creates its Top 10 list of the most critical security risks to web applications. 
• Key changes for 2021, including recategorization of risk to align symptoms to root causes. 
• When each risk can manifest, why it matters, and how to improve your security posture. 

The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. OWASP maintains a variety of projects, including the Top 10 web application security risks standard awareness document for developers and security practitioners. 
 
Watch the other episodes of the series below.

By watching this lightboard session, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

OWASP Top 10 Overview

In this session, you will learn how to leverage collected metrics and pre-defined alerts to visualise application condition through open-source tools such as Elasticsearch, Kibana, and Prometheus. 

Using real-life use cases, we'll discuss how you can: 

• Control every deployed application 
• Visualise automatically deployed applications 
• Enable your existing solutions to drive observability for your deployed applications 
Reveal illegal or malicious behaviour towards your published services 

Watch the other episodes of the series: 

Ep 1: Modernising and Securing Your API Architecture 

Ep 2: Multi-layer App Security in Kubernetes for DevSecOps 

Ep 3: How Smarter Bot Mitigation with Machine Learning Can Reduce Business Risks and Costs 

Ep 5: Top 5 Pitfalls to Avoid in Client-Side Security 

Ep 6: Scaling Your App Delivery Infrastructure in Minutes not Days 

 

By watching this webinar, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

Episode 4 - Why You Need Observability Beyond Monitoring Apps

Encryption plays an essential role in securing our online lives. Yet with web server misconfigurations, new vulnerabilities, and governments attempting to weaken encryption, it’s never been more difficult to get HTTPS right. In fact, it’s such a problem that the OWASP Top 10 list now has “cryptographic failures” as the second most critical risk to securing web applications.

In the newly released F5 Labs 2021 TLS Telemetry Report, encryption experts dive into the results of their open-source HTTPS scanner, Cryptonice, that shows us how some websites are making progress while others are leaving themselves open to abuse with their TLS configurations. Through TLS fingerprinting they also reveal how the world’s most popular sites may be hiding malicious command and control servers.
Join this webinar to find out why strong HTTPS configurations are so critical to your online security posture. We’ll also explain some of the more important events over the past 18 months, including a look at TLS 1.3, some newly discovered vulnerabilities, and how you can use the Cryptonice tool to evaluate the security of your own HTTPS websites.

In this webinar you'll learn:
- How the world’s most popular sites configure HTTPS
- The pitfalls of HTTPS and the vulnerabilities that many websites still leave themselves open to
- How to use Cryptonice to scan your internal and public facing websites
- The current TLS/HTTPS best practices and recommendations

By watching this episode, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time.

2021 TLS Report: How Not to Configure HTTPS

Join F5 for a breakdown of findings from the 2021 Application Protection Report. This report is the latest publication from the security research team at F5 Labs. It uses a year's worth of attack data to help security professionals prioritize defenses against threats such as ransomware, formjacking, and unsolicited API's. We will explore the tactics and techniques employed in more than 700 data breaches from 2020 and offer detailed recommendations for mitigating these risks.

The increasing complexity of the security environment means that responsibility for enterprise security is not only spread across teams, but often falls to vendors and partners as well. That diffusion leads to challenges in visibility and incident response. Knowing what to prioritize requires context and a coherent picture of the threat landscape.

The 2021 Application Protection Report from F5 Labs offers a detailed breakdown of prominent attack types, and offers practical suggestions and recommendations.  We will explore the tactics and techniques employed in more than 700 data breaches from 2020 and offer detailed recommendations for mitigating these risks.

By watching this episode, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time.

Application Protection Report: Key Findings

Open banking can change the game for financial services and empower consumers like never before. Regulatory interventions like the European Commission’s Second Payment Services Directive (PSD2) requires banks to create mechanisms (APIs) to provide data quickly, securely, and reliably to third-party providers. Open banking will transform the very future of banking.  The good news is that some progressive financial institutions have led the way for defining and deploying an API strategy that turns open banking from a compliance requirement into a competitive advantage.  In this webinar we'll cover:

• The challenge, catalyst of change, and growth model of open banking
• The open banking maturity matrix, based on regulatory and market initiatives
• Key imperatives for successful implementation of open banking
• Scaling and maximising API performance
• Safeguarding APIs and protecting against API-specific threats

By watching this podcast, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

Open Banking: Trends, Challenges, and Opportunities

Banking

Cyber Security

Security

Open Banking

Cloud

Financial Planning

API Management

APIs

Cyber Defence

Information Security

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Open Banking: Trends, Challenges, and Opportunities

Presented by

About this talk

More from this channel