Larry Maccherone, Contrast Security, DevSecOps Transformation Evangelist
Our digital landscape is an intricate web, composed of a myriad of APIs, microservices, web apps, serverless functions, libraries, and frameworks that span numerous cloud-based and on-premise ecosystems. Merely cataloging your APIs no longer suffices in ensuring their security. According to the Gartner report Predicts 2022: APIs Demand Improved Security and Management, "API security challenges have emerged as a top concern for most software engineering leaders, as unmanaged and unsecured APIs create vulnerabilities that could accelerate multi-million-dollar security incidents." This presentation will delve into the quintessential elements of a comprehensive API security strategy. Our journey will traverse the realms of detection, security testing, fortifying libraries, runtime safeguards, and mastering access management. A particular emphasis will be placed on the power of automation and balanced scrutiny of conventional scanning and perimeter tools alongside state-of-the-art, instrumentation-based security solutions. Attendees will emerge with actionable insights and clear direction to elevate their API security practices to new heights. Let's move beyond just checking off boxes, to truly safeguarding our digital assets!
