Discovery is the Starting Point for Defending APIs

Logo
Presented by

Giora Engel, CEO and Co-founder of Neosec

About this talk

It's almost a certainty that a good pen test or Red Team exercise will find APIs that are out-of-date, misconfigured or not properly managed. Defending these--and establishing a stronger security stance--is difficult, if not impossible, for many organizations simply because they do not know about a considerable portion of APIs they have in use. APIs often come into play directly from departments, business units and even individuals without the knowledge of security or IT. With many of these APIs being invisible to security teams, they are impossible to properly secure. This presentation examines the problem of hidden APIs and how to establish a practice of complete discovery and maintain an up-to-date inventory and knowledge of APIs.
Related topics:

More from this channel

Upcoming talks (0)
On-demand talks (7)
Subscribers (674)
Neosec is now part of Akamai! Akamai is a global leader in cloud computing and security, and we're confident that this partnership will allow us to take our API security solutions to the next level. Follow Akamai Technologies to stay up-to-date on the latest API Security news and developments.