Not All Those Who Wander Are Lost: API Security Shifts Left with David Homoney
In this insightful talk, David Homoney, a sales engineer for the West at Apiro, delves into the critical importance of API security in today's digital landscape. With a background in API and workload security, David brings knowledge from his previous roles, including Technical Solutions Architect at Worldwide Technology and his tenure at F5.
Key Takeaways:
-API Security as a Catalyst: David explains how API security pushes traditional SEC Ops to shift left, focusing more on APIs during the development phase rather than just runtime protection.
-Explosive Growth of APIs: Highlighting the increasing reliance on APIs, especially in mobile applications, microservice architectures, healthcare, banking, connected cars, and AI.
-Challenges in API Security: This section discusses the shortage of security personnel and the critical need for organizations to adapt to the rapid pace of innovation and development.
Three Main Tenets of API Security:
-API Discovery: Identifying all APIs, including those not behind traditional gateways.
Posture Management: Assessing the vulnerability of APIs and understanding the nature of incoming attacks.
-Remediation: Addressing issues through various means, including automated ticketing and direct communication with developers.
-Integration and Innovation: Emphasizes the need for a holistic approach to API security that includes both runtime and code-side measures, integrating tools for better visibility and control.