APISEC|CON Automotive: Automotive API Security Risks: Frontline Insights from the Vehicle SOC
Join us for an in-depth session on automotive API security risks featuring Shaked Edry, Data Analyst Team Lead at Upstream Security. Gain exclusive insights from the Vehicle Security Operations Center (VSOC) on monitoring and mitigating API-based threats in the automotive industry.
Key Highlights:
-Introduction to Upstream Security: Learn about Upstream’s cloud-based XDR platform, designed specifically for the automotive and smart mobility ecosystem.
-VSOC Explained: Discover the importance of a dedicated vehicle-oriented -SOC in maintaining operational continuity and protecting against sophisticated cyber threats.
-Real-World Threat Scenarios:
-Credential Stuffing: Understand how attackers use stolen credentials to gain unauthorized access and how VSOC detects and responds to these threats.
-Unauthenticated API Calls: Explore cases where internal and external APIs lacked proper authentication, exposing sensitive data.
-BOLA (Broken Object Level Authorization): Learn about this common API threat and how attackers exploit it to gain unauthorized access.
-Enumeration Attacks: See how threat actors systematically query systems to discover valid identifiers and how to guard against this type of attack.
-The Importance of Context: Learn why a comprehensive view across API security, automotive cloud security, and vehicle security is essential for robust protection.
-Future of Automotive Cybersecurity: Understand how the industry is transitioning to software-defined vehicles and the importance of a multi-layered cybersecurity stack.
This session is a must-watch for anyone involved in the automotive and smart mobility ecosystem, offering practical insights and strategies to enhance API security and protect against evolving cyber threats.
🔔 Don’t forget to subscribe for more insights on automotive cybersecurity and API protection!