Defending Dev
INDEX / TAGS / API-SECURITY 18 ENTRIES
01 — THE ARGUMENT

Everything tagged “api-security”.

Posts, tutorials, reviews and videos tagged api-security, newest first.

02 — ALL ENTRIES, NEWEST FIRST
API security that works: from real-world breaches to practical fixes API security consultant Colin Domoney joins a Treblle webinar to discuss what goes wrong in real-world API breaches, including authorization failures and AI-driven risks, and how teams can address them. VIDEO · APPEARANCE · 27 JUN · 66 MIN Defending APIs: book Q&A A Q&A about Colin Domoney's book 'Defending APIs' (published by Packt), describing its intended audience of application security engineers, blue teamers, API developers, and pentesters. VIDEO · APPEARANCE · 27 FEB · 36 MIN Building a rugged API security program Colin Domoney discusses building a rugged API security program, covering the Rugged Manifesto, real-world API security challenges, and a four-level maturity model. VIDEO · TALK · 28 MAY · 29 MIN The OWASP API Security Top 10, 2023 listing Colin Domoney reviews the 2023 update to the OWASP API Security Top 10 list, including his research into API vulnerabilities over the prior 12 months and changes to the list. VIDEO · APPEARANCE · 30 AUG · 40 MIN Mastering secure API development with GitHub and 42Crunch Isabelle Mauny (Field CTO) and Colin Domoney (Chief Technology Evangelist) at 42Crunch give live demos of how 42Crunch integrates with GitHub to build secure APIs within a developer's workflow. VIDEO · APPEARANCE · 25 AUG · 50 MIN Mastering API security: top 10 threats and defences Colin Domoney, CTO at 42Crunch, explores the updated 2023 OWASP API Security Top 10 and defensive strategies, at the INTERFACE by apidays conference (June 28-29, 2023). VIDEO · TALK · 15 JUL · 26 MIN Crash course on the OWASP API Security Top 10 A walk through the OWASP API Security Top 10, given at the OWASP Netherlands chapter. VIDEO · TALK · 19 MAY · 44 MIN Defending APIs with Jim Manico: request forgery Jim Manico and Colin Domoney discuss request forgery, covering both client-side (CSRF) and server-side (SSRF) variants and how to prevent them, aimed at developers building secure web applications and APIs. VIDEO · APPEARANCE · 26 JAN · 53 MIN Review of the major API breaches, H2 2022 Colin Domoney reviews major API breaches from the second half of 2022, outlining the vulnerabilities exploited and how to protect against them. VIDEO · APPEARANCE · 26 JAN · 51 MIN Review of the major API breaches, H1 2022: episode 2 In this second episode, Colin Domoney demonstrates how to defend against the API attack types and real-world exploits covered in episode one's review of major API breaches from H1 2022. VIDEO · APPEARANCE · 26 JAN · 47 MIN Hacking APIs for fun and profit Colin Domoney, Developer Advocate at 42Crunch, talks with Adrian and Bogdan Tiron, Managing Partners at Fortbridge, about their careers as penetration testers and their experience testing and exploiting API-based products. VIDEO · APPEARANCE · 26 JAN · 55 MIN OWASP API Security Top 10 challenges: episode 1 In the first episode of a webinar series, Dr Philippe de Ryck and Colin Domoney discuss API security and the challenges presented by the OWASP API Security Top 10, answering attendee questions. VIDEO · APPEARANCE · 26 JAN · 58 MIN OWASP API Security Top 10 challenges: episode 3 Dr Philippe De Ryck and Colin Domoney address the remaining five OWASP API Security Top 10 challenges (rate limiting, security misconfiguration, injection, improper assets management, and insufficient logging/monitoring). VIDEO · APPEARANCE · 26 JAN · 57 MIN OWASP API Security Top 10 challenges: episode 2 Dr Philippe De Ryck and Colin Domoney address the OWASP API Authentication and Authorization Challenges one-by-one, with practical examples of how to fix and secure APIs against them. VIDEO · APPEARANCE · 26 JAN · 54 MIN Are your APIs rugged? The rugged API talk, given at the OWASP Netherlands chapter. VIDEO · TALK · 4 DEC · 37 MIN Are your APIs rugged? Colin Domoney of 42Crunch presents 'Are Your APIs Rugged?' at the second annual OWASP AppSec Pacific Northwest conference (Victoria/Vancouver/Portland chapters), held June 11, 2022. VIDEO · TALK · 22 AUG · 26 MIN Interview: are APIs really secure? A short interview segment asking whether APIs are really secure and arguing that businesses should adopt a continuous approach to API security for business continuity. VIDEO · APPEARANCE · 8 DEC · 1 MIN Be your own security champion A sponsored conference session titled 'Be your own security Champion' presented by Colin Domoney of 42Crunch. VIDEO · TALK · 7 OCT · 10 MIN