Workshop: Dev, Sec and Ops for APIs - Isabelle Mauny, 42Crunch
Workshop: Dev, Sec and Ops for APIs - Isabelle Mauny, 42Crunch
The enterprise use of APIs is growing exponentially. Agile development, business pressure and the complexity of API security have made security teams life very complicated. To make matters more complicated, the adoption of microservices architectures has multiplied the number of API endpoints they have to protect.
The more APIs, the higher the security risk!
In order to scale, security should be considered at design phase, then applied during development by attaching pre-defined policies to APIs and ensuring that security tests are performed as part of the continuous delivery of the APIs. Specifications like OpenAPI can play a critical role in helping Dev and Sec speak the same language and automate the delivery of secured APIs.
In this workshop you will learn:
Security risks at each stage of the API lifecycle, and how to mitigate them.
How to implement an end-to-end automated API security model that development, security and operations teams will love.
Why a positive security model works for APIs.