OWASP crAPI to understand API security risks & Enhancing Quality and Security during API Lifecycle

preview_player
Показать описание
Using the OWASP crAPI to understand the most critical API security risks (by Filip Verloy - Field CTO EMEA, Noname Security):
Considering how integral APIs have become across the private and public sectors, they also present a rapidly expanding attack surface. And the reality is, they are often misunderstood and frequently overlooked by application security managers and software developers.
Exposed, faulty, broken, or hacked APIs are at the heart of many major data breaches. These attacks expose sensitive financial, medical, and personal data for public consumption, leaving organizations on the hook.
By using the OWASP completely ridiculous API (crAPI) we will help you to understand the most critical API security risks. We'll demonstrate how to think like an attacker and breach the crAPI application by using standard tools like Postman. Once we understand the vulnerabilities in the platform we'll demonstrate how to detect and remediate these issues.

Enhancing Quality and Security throughout the API Lifecycle (by Jiri De Jagere - Senior Director Product Strategy, Software AG):
An opinionated view on the API ecosystem
Рекомендации по теме
Комментарии
Автор

Hi Cloud you share where I can download the postman collection ? I would like to implement this attack on my lab env.

viaionary
Автор

Hi expoert,
could you share where I can download the postman collection ? I would like to implement this attack on my lab env.

viaionary