API Security: Stories from the Trenches, Common Flaws, and Ways to Mitigate

APIs are increasingly becoming the preferred attack vector to hack into applications, sites, and corporate data. Recent examples of API-based breaches include USPS, DJI, Steam, Remini, GitLab, Facebook, and many others.

In this webinar, we will look at how you can:

· Use your API definition (OpenAPI/Swagger) as the foundation of your API security process,

· Identify potential security flaws based on your API contact,

· Lock down the API definition to maximize your security,

· Ensure that your live API implementation conforms to the locked down definition,

· Embed security into your DevSecOps process to ensure that your development, security, and operations team are on the same page and no changes to your code compromise your security level.