Master API Cybersecurity using Sherlock Holmes Detective Skills with Brenton House
There is nothing elementary about API Security, except perhaps for the world's greatest detective, Sherlock Holmes. 👇🏻👇🏻👇🏻 Follow the Clues Below! 👇🏻👇🏻👇🏻
Head on over to 221B Baker Street to join API Cybersecurity Strategist, Brenton House, as he carefully follows the clues left behind by Sherlock Holmes that enable you to secure your company's APIs, data, and reputation. The game is afoot!
This is the presentation from API Days NY 2022 that has everyone talking! You don't want to miss it!
▬▬▬▬▬ 🛡️ SHIELDS UP 🛡️ ▬▬▬▬▬
API Cybersecurity 101 - Everything you wanted to know about API Security Best Practices and Digital Transformation with Senior Digital Strategist, Brenton House!
▬▬▬▬▬ 🟣 API SECURITY 🟣 ▬▬▬▬▬
APIs are everywhere and API Security has never been more important than it is right now. API abuses have risen in the past few years and it is difficult to go even a week without reading about another API that has been attacked. By securing your APIs using API Security solutions and API Management best practices, you can mitigate attacks and protect your organization, your customers, your data, and your reputation. So What is API Security Shift Left and Shield Right?
▬▬▬▬▬ 🟢 WHAT IS OWASP? 🟢 ▬▬▬▬▬
OWASP stands for "Open Web Application Security Project" and they are an international non-profit organization dedicated to web application security.
▬▬▬▬▬ ⏪ SHIFT LEFT ⏪ ▬▬▬▬▬
"Shift Left" is referring to shifting your security focus to the beginning of the API Lifecycle process and integrating it into the design and development of an API that works to help protect it in every other step of the API Lifecycle all the way to the retirement of an API.
▬▬▬▬▬ ⏩ SHIELD RIGHT ⏩ ▬▬▬▬▬
"Shield Right" is talking about the emphasis on continuing to protect your APIs at runtime and beyond. This provides a defense against unknown attacks using AI/ML and defined algorithms and policies.
▬▬▬▬▬ 🟡 OWASP API SECURITY 🟡 ▬▬▬▬▬
What is the OWASP Top 10 for API Security?
⭐ Broken Object Level Authorization
⭐ Broken User Authentication
⭐ Excessive Data Exposure
⭐ Lack of Resources & Rate Limiting
⭐ Broken Function Level Authorization
⭐ Mass Assignment
⭐ Security Misconfiguration
⭐ Injection
⭐ Improper Assets Management
⭐ Insufficient Logging & Monitoring
▬▬▬▬▬ 🔵 BONUS LINKS 🔵 ▬▬▬▬▬
⚡ So you think your API is secure? 👉🏼 https://api2.day/api-security
⚡ What is API Security 👉🏼 https://api2.day/what-is-api-security
⚡ OWASP 👉🏼 https://api2.day/owasp
⚡ OWASP Top Ten List for API Security 👉🏼 https://api2.day/owasp-top-10-api
⚡ OWASP Top Ten List for Web Applications 👉🏼 https://api2.day/owasp-top-ten
⚡ Free Trial for webMethods API Gateway 👉🏼 https://api2.day/webmethods-api
▬▬▬▬▬ 🟠 WHAT IS AN API? 🟠 ▬▬▬▬▬
Basically, it is non-human systems that talk to each other in an agreed-upon way! API Management, which includes things like API Gateway and API Developer Portal, allows your APIs to scale while prioritizing API Security. This is all part of API First methodology which helps drive the API Economy. Learning to treat your API as a Product, with proper budget, resources, and management, helps organizations succeed in releasing API Platforms that users, customers, and developers LOVE!
▬▬▬▬▬ ❤️ LEVEL-UP ❤️ ▬▬▬▬▬
🎬 Watch ▪ Check out more API videos! / apishorts ( bring your own 🍿 )
🔔 Subscribe ▪ Get notified when new content is available!
👍🏻 Thumbs Up! ▪ Love APIs? 😍 Like our video and share it!
💬 Comment ▪ Let us know what you think of this episode!
▬▬▬▬▬ 👀 LET'S CONNECT 👀 ▬▬▬▬▬
⭐ LinkedIn 👉🏼 https://api2.day/linkedin
⭐ Twitter 👉🏼 https://api2.day/twitter
⭐ YouTube 👉🏼 https://api2.day/youtube
⭐ Medium 👉🏼 https://api2.day/medium
⭐ Dev.to 👉🏼 https://api2.day/devto
⭐ Software AG 👉🏼 https://api2.day/sag-brenton
▬▬▬▬▬ ⚡ SUPERCHARGE ⚡ ▬▬▬▬▬
⚡ Digital Strategist 👉🏼 https://api2.day/brenton
⚡ Software AG Blog 👉🏼 https://api2.day/sag-blog
⚡ API Knowledge Portal 👉🏼 https://api2.day/knowledge
▬▬▬▬▬ 📕 CHAPTERS 📕 ▬▬▬▬▬
00:00 ▶️ API Cybersecurity Presentation Intro
00:21 ▶️ Breaking Cybersecurity News
01:56 ▶️ Brenton House - Cybersecurity Detective
02:20 ▶️ Sherlock Holmes Cybersecurity
02:47 ▶️ Know your Resource
03:25 ▶️ Know your Situation
04:09 ▶️ Know your Adversary
04:44 ▶️ Sherlock API Security Detective Exam
05:40 ▶️ Case Study - Peloton API Breach
06:34 ▶️ Peloton API Security Failure Timeline
08:10 ▶️ Peloton - API Resources
09:16 ▶️ Peloton - API Situtation
11:54 ▶️ Peloton - API Adversaries
13:46 ▶️ API Cybersecurity Bonus
14:19 ▶️ API Cybersecurity Videos
14:36 ▶️ API Cybersecurity Content
▬▬▬▬▬ 🎬 DIGITAL TOOLS 🎬 ▬▬▬▬▬
Apple Final Cut Pro 👉🏼 https://api2.day/fcp
Adobe After Effects 👉🏼 https://api2.day/ae
mmhmm 👉🏼 https://api2.day/mmhmm
▬▬▬▬▬ 📘 CREDITS 📘 ▬▬▬▬▬
All music is used with proper license and permission of the original creators for use in monetized and non-monetized videos on this YouTube channel.
#api #infosec #cybersecurity