Three things I enjoyed doing the most: turning great team into great companies, great ideas into great products, and in spare time study real history and travel
Joined November 2018
- Tweets35
- Following1
- Followers23
- Likes2
Look forward to the discussion. Please register to join us.
There's still time to register for this afternoon's #APISecurity #webinar featuring @ErezYalon, @Cloudvect's @LebinCheng, and @SingalFire! Reserve your spot now! bit.ly/2Dhhu8v #API #AppSec
Lebin Cheng retweeted
We talked about OWASP API Security Top 10 a lot. I am very excited to have an opportunity to participate in a round table discussion with one of the founders of the OWASP API Security project: Erez Yalon. Please join us: zmurl.com/636hk5k
We talked about OWASP API Security Top 10 a lot. I am very excited to have an opportunity to participate in a round table discussion with one of the founders of the OWASP API Security project: Erez Yalon. Please join us: zmurl.com/636hk5k
Part 2 of a 3 part series of API Security Checklist from @sandeepvaday . Useful info as you design your APIs.
lnkd.in/g46bnZ9
#API #openapi #security
Time to thing about testing/monitoring APIs on the service side:
cloudvector.com/how-a-truste…
Security by design, especially when it comes to API Security:
cloudvector.com/api-security…
If you are interested in learning more, please come try it yourself. Send in an API specification in OpenAPI/Swagger format, we will send you a report:
cloudvector.com/api-risk-ass…
A very insightful conversations among CISOs dealing with the new normal caused by COVID19. Learned a lot from the notes: linkedin.com/posts/rkhatod_e…
The findadoctor.com data leak incident reviews a new API attack surface that may increase as the rapid micro-service architecture adoption continues. It is strictly speaking not a "surface", it is a crack, a gap in-between services:
cloudvector.com/data-leaks-w…
A CSO friend once made a comment that an API Catalog is a kind of asset registry. Companies have been keeping a registry for all important assets. APIs have been one asset that is becoming increasingly important. Too important to be kept in the dark.
This Post is from an account that no longer exists. Learn more
Lebin Cheng retweeted
Three API security risks in the wake of the #Facebook breach - by @lebincheng via Help Net Security
#APISecurity
#cybersecurity
#APIGateway
#CICD
#DevSecOps
helpnetsecurity.com/2020/02/…
The latest docker API abuse just another example showing the importance of API parameter level inspection.
This Post is from an account that no longer exists. Learn more
If you happen to visit the CyberSecurity and Cloud Expo at the Santa Clara Convention Center, please drop by our booth (809).
I am also joining a panel discussion at 3:40pm to talk about "Red Hot Security": cybersecuritycloudexpo.com/n…
Just posted another article in light of the most recent major WAF breach. linkedin.com/pulse/when-your…
Just posted an article about how (in)effective existing gateways against data breaches.
linkedin.com/pulse/4-massive…
Perimeter defense, esp the single prevention layer design, is not a good fit for cloud apps. Time to rethink. linkedin.com/pulse/why-tsa-r… via @LinkedIn
Credential/Key loss happens. That's why in real world people use security camera to monitor their safes in addition to the locks to detect actual money/data theft.
This Post is from an account that no longer exists. Learn more
While code safety and secure accesses are important parts of App and API Security, I would argue that it is ultimately data that is the most important thing to protect.
linkedin.com/pulse/protect-d… via @LinkedIn
Want to share a post about the importance of API risk management: linkedin.com/feed/update/urn…