3 Pillars of API Security

Join API security experts from U.S. Bank, ActBlue, and Spotify for a lively discussion on The 3 Pillars of API Security: 1) API Governance, 2) API Security Testing, and 3) Run-time API monitoring.

APIs have become a top concern for CISOs vulnerabilities have led to many high profile breaches. Securing these APIs requires finding and fixing the vulnerabilities and flaws as early as possible in the development cycle.

Chapters:
00:00 - Introduction
06:08 - Webinar Overview
06:53 - Security Governance
18:26 - Question: Do we recommend succinct sections regarding API security in an information security policy, or something separate and more specific?
21:19 - Security Testing
34:15 - Question: How do you know if you're implementing the right implementation?
38:33 - Security Monitoring & Protection
45:20 - Bonus Section: Other/Iterate
47:08 - APIsec University
48:35 - EthicalCheck Tool
49:32 - Question: Where can we learn how to securely create an API?
51:15 - Question: Is there a course certificate you can earn?
51:30 - Question: What specific NIST standards would you recommend with respect to API security?
52:10 - FedRAMP & Wrap Up

🔔Keep up to date on new releases and content