Protecting Critical Web APIs: Evolution of Attack Vectors & Defense Strategies - ERP Spain.com - España y América Latina

Web APIs that handle critical workflows like login or new accounts creation are constant targets of attacks. Web site owners need to protect these endpoints in order to prevent account takeover as well as the proliferation of fake accounts. In this presentation, we’ll look through real examples at how attackers evolve their strategies as soon as protections are in place. We’ll also provide some insights into the most effective detection methods in order to counter the evolution and to stay ahead. And finally, we’ll discuss how the evolution of the Internet ecosystem is affecting the web security world and make the task more complex.