The Haunted House of APIs - The Witch’s Brew with Jayesh Ahire

Code Story

The Haunted House of API's

The Witch’s Brew: Stirring Up OWASP Vulnerabilities and API Testing

Today, we are kicking off an amazing series for Cybersecurity Awareness month, entitled the Haunted House of API’s, sponsored by our friends at Traceable AI. In this series, we are building awareness around API’s, their security risks – and what you can do about it. Traceable AI is building One Platform to secure every API, so you can discover, protect, and test all your API's with contextual API security, enabling organizations to minimize risk and maximize the value API's bring to their customers.

In today’s episode, we will be talking with Jayesh Ahire, an expert in API testing and OWASP, will guide us through the "brew" of common vulnerabilities that haunt API ecosystems, focusing on the OWASP Top 10 for APIs. He’ll share how organizations can use API security testing to spot and neutralize these vulnerabilities before they become major exploits. By emphasizing proactive security measures, Jayesh will offer insights into creating a strong API testing framework that keeps malicious actors at bay.

Discussion questions:

1. What are some of the most common vulnerabilities in APIs that align with the OWASP Top 10, and why are they so dangerous?
2. Why is API security testing crucial for detecting these vulnerabilities early, and how does it differ from traditional security testing?
3. Can you share an example of how an overlooked API vulnerability led to a significant security breach?
4. How can organizations create an effective API testing framework that addresses these vulnerabilities?
5. What tools or methods do you recommend for continuously testing APIs and ensuring they remain secure as they evolve?

Sponsors

• Traceable

Links

• https://www.traceable.ai/
• https://www.linkedin.com/in/jayesh-ahire/
• https://owasp.org/

Support this podcast at — https://redcircle.com/code-story/donations
Advertising Inquiries: https://redcircle.com/brands
Privacy & Opt-Out: https://redcircle.com/privacy