CSIT Village·22 min
Poh Cai Min · Shawn Pang
Poh Cai Min and Shawn Pang examines grammar-based fuzzing made painless.
fuzzingapi-securitygrammar-fuzzing+1
api-security
63 talks tagged with this topic.
Filters+
Loading filters…
1–24 of 56 talks / 63 · loading…
CSIT Village·17 min
Daryl Lim · Zhi Kai
Daryl Lim and Zhi Kai examines a thought experiment on Rolling API Tokens, leveraging the Double Ratchet Protocol to eliminate long-lived secrets through continuous key rotation.
api-securitytoken-securitycryptographic-protocols+1
BalCCon - Balkan Computer Congress·39 min
Amit Sharma
Explores balCCon2k23 - Amit Sharma - API Security in the world of Microservices and evaluates key implications for security practitioners.
api-securitybalccon2k23amit+1
Black Hat·6 min
Analysts investigate attack surfaces and defenses concerning Modernizing API Security.
api-securitymodernizingvulnerability-research
Car Hacking Village·22 min
Eaton Zveare
Reveals critical API vulnerabilities in a major automotive dealer platform that allowed national admin account creation and remote vehicle command access.
automotiveapi-securityaccess-control-bypass+2
CornCon·31 min
Todd Bell @ Valleywise Health investigates VI - API Security for the API Economy.
api-securityeconomyvulnerability-research
Creator Stage·50 min
Adam Langley · Ben Sadeghipour
Demonstrates practical regular expression techniques for bug bounty hunters to uncover hidden API endpoints, bypass filters, and extract secrets from code repositories.
reconbug-bountysecrets-detection+2
Main Stage·35 min
Eaton Zveare · R Piyush
Reveals critical API authorization vulnerabilities in automotive dealer management systems that allowed national admin account creation and remote vehicle control.
automotiveapi-securityaccess-control-bypass+2
Mobile Village·25 min
Bogdan Tiron
Examines authorization and access control vulnerabilities in GraphQL and REST APIs, using the Feeld dating app data leak as a case study in data exposure.
graphqlaccess-controlapi-security+2
OWASP Foundation·14 min
Security researchers examine technical aspects of AI and API Security Panel.
api-securitypanelvulnerability-research
OWASP Foundation·55 min
Alex Mor
Alex Mor explores API Security Assurance via E2E Testing.
api-securityassurancetesting
OWASP Foundation·43 min
Jose Haro Peralta
Jose Haro Peralta investigates API Security By Design.
api-securitysecurity-by-designdesign
OWASP Foundation·31 min
PHILIPPE DE RYCK
PHILIPPE DE RYCK explores Common API Security Pitfalls.
api-securitypitfallcommon
OWASP Foundation·58 min
Tim De Boeck
Tim De Boeck explores Exhibitor: A Risk based Approach to API Security.
api-securityexhibitorrisk+1
OWASP Foundation·31 min
Paulo Silva · Erez Yalon
Paulo Silva examines OWASP API Security Project.
owaspapi-securityproject
OWASP Foundation·37 min
Industry experts analyze emerging threats surrounding OWASP BeNeLux Day Common REST API security pitfalls by Philippe De Ryck.
owaspapi-securitybenelux+2
OWASP Foundation·31 min
I. Mauny
I. Mauny analyzes OWASP Standard Classification: API Security Top 10 - A Beginner's Guide to Mitigation.
owaspapi-securitystandard+3
PROIDEA Events·49 min
4Developers 2020, Jacek Milewski, Arch. App: Login API Security - is that you who attacks my system?
Security researchers examine technical aspects of 4Developers 2020, Jacek Milewski, Arch. App: Login API Security - is that you who attacks my system?.
api-security4developerjacek+2
PROIDEA Events·46 min
Tom Zahov Zaubermann
Tom Zahov Zaubermann details 4Developers 2021: API Security - Divide & Conquer.
api-security4developerdivide+2
PROIDEA Events·46 min
Presenters detail vulnerability discovery and exploitation in JDD 2020: Login API Security - is that you who attacks my system? (Jacek Milewski).
api-securityloginattack+1
The Linux Foundation·31 min
Yuichi Nakamura
Outlines sponsored Session: High-level API Security by Keycloak and evaluates key implications for security practitioners.
api-securitysponsoredhigh-level+2
Wild West Hackin' Fest·37 min
Charles Shirer
Presenters detail vulnerability discovery and exploitation in Abusing API Security | Charles Shirer.
api-securityabusingcharle+2
App Sec Village·33 min
Ravid Mazon · Jay Chen
Automated detection of Broken Object Level Authorization (BOLA) vulnerabilities across web APIs using LLMs in BOLABuster.
bolaapi-securityllm+2
App Sec Village·29 min
Vangelis Stykas
How API vulnerabilities in EV chargers and solar inverters create systemic risks for power grid infrastructure.
critical-infrastructureics-otv2g+2