Security & Identity in the API World (July 2018)

Privacy, Security and Identity are the topics of the year. Equifax, India’s biometric database, Facebook's breach of trust, Tesla's cars, Apple iCloud, Snapchat/Snapsaved's hacks.... These scandals have been caused by a lack of API Security or an unsafe Identity Management. You can name them: DDoS, Cash overflow. MITM, Brute forcing non-rate-limited API endpoints, OAuth vulnerabilities, improper use of CORS, Cross-site request forgery (CSRF), flawed session management, too permissive OAuth scopes... You just need to be wrong once to get all your security efforts wasted. And in the context of the GDPR regulation, it can lead to a fine of 4% of your total revenue. All of these are API-driven practices and can be avoided with a good API management.

​

Welcome to the programmable web, where every interaction is designed to be automated, scalable. So are abuses and threats.

​

We gathered the best experts and companies on API security and Identity management to talk about how every app and every API should be secured and what is the state of the art of Access control & Access level management, Identity management and identity delegation with OpenIDConnect, User-Managed Access, and Blockchain based identity.