{"id":12567,"date":"2019-12-10T16:28:19","date_gmt":"2019-12-10T16:28:19","guid":{"rendered":"https:\/\/42crdev.prexihost.com\/?p=12567"},"modified":"2022-11-28T15:30:19","modified_gmt":"2022-11-28T15:30:19","slug":"webinar-positive-api-security-model","status":"publish","type":"post","link":"https:\/\/staging2022.42crunch.com\/webinar-positive-api-security-model\/","title":{"rendered":"Positive API Security Model, and Why You Need It!"},"content":{"rendered":"\r\n<h4>Webinar<\/h4>\r\n<p>Many of the issues on the OWASP API Security Top 10 are triggered by the lack of input or output validation.<\/p>\r\n<p>To protect APIs from such issues, an API-native, positive security approach is required: we create an allowlist of the characteristics of allowed requests. These characteristics are used to validate input and output data for things like data type, min or max length, permitted characters, or valid values ranges. But how do we fill the gap between security and development mentioned above?<\/p>\r\n<p>What you&#8217;ll learn:<\/p>\r\n<ul>\r\n<li>\r\n<ul>\r\n<li>Why WAFs fail in protecting APIs<\/li>\r\n<li>How an allowlist protects against A3, A6 and A8 of the OWASP API Security Top 10 &#8211; (with real-life examples)<\/li>\r\n<li>How to build a proper allowlist for API security<\/li>\r\n<\/ul>\r\n<\/li>\r\n<\/ul>\r\n<h3>Speaker<\/h3>\r\n<p><img decoding=\"async\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/08\/Isabelle-Mauny.png\" alt=\"Isabelle Mauny\" \/> Isabelle Mauny<\/p>\r\n<h4>Field CTO and Co-founder<\/h4>\r\n<p><b>\u00a0 \u00a0<\/b><\/p>\r\n<h2>Watch the Webinar<\/h2>\r\n<p><iframe src=\"https:\/\/player.vimeo.com\/video\/737854491?h=af28fa7926&amp;badge=0&amp;autopause=0&amp;player_id=0&amp;app_id=58479\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/p>\r\n<h2>Browse the Deck<\/h2>\r\n<p><a href=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/08\/webinar-positive-api-security-model-1.pdf\" target=\"_self\" rel=\"noopener\"> <img loading=\"lazy\" decoding=\"async\" title=\"webinar-positive-api-security-model0001-00\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/08\/webinar-positive-api-security-model0001-00-1.jpg\" alt=\"webinar-positive-api-security-model0001-00\" width=\"1500\" height=\"843\" \/> <\/a><\/p>\r\n","protected":false},"excerpt":{"rendered":"<p>Many of the issues on the OWASP API Security Top 10 are triggered by the lack of input or output validation.<\/p>\n","protected":false},"author":11,"featured_media":12876,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"none","_seopress_titles_title":"Positive API Security Model, and Why You Need It","_seopress_titles_desc":"To protect APIs from security issues, an API-native, positive security approach is required","_seopress_robots_index":"","site-sidebar-layout":"default","site-content-layout":"default","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"disabled","ast-hfb-above-header-display":"disabled","ast-hfb-below-header-display":"disabled","ast-hfb-mobile-header-display":"disabled","site-post-title":"disabled","ast-breadcrumbs-content":"disabled","ast-featured-img":"disabled","footer-sml-layout":"disabled","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[9],"tags":[14,32],"class_list":["post-12567","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-webinars","tag-api-security","tag-on-demand"],"_links":{"self":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/posts\/12567"}],"collection":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/comments?post=12567"}],"version-history":[{"count":0,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/posts\/12567\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/media\/12876"}],"wp:attachment":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/media?parent=12567"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/categories?post=12567"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/tags?post=12567"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}