Combatting API Vulnerabilities with the 3 Pillars of API Security

A talk given by Dan Barahona from APISec University at the 2023 Platform Summit in Stockholm.

In this session we will address the pressing issue of API security, investigating why APIs have become the “most frequent attack vector” according to Gartner, and analyzing real-world API breaches. Drawing from the recently released 2023 OWASP API Security Top 10, we will uncover the common vulnerabilities that expose APIs to exploitation. By understanding the 3 Pillars of API Security, encompassing governance, testing and monitoring, attendees will gain a comprehensive understanding of the essential elements required to safeguard APIs. The session will conclude with practical insights, offering best practices and valuable do’s and don’ts for implementing and maintaining secure APIs.