{"id":12688,"date":"2021-02-18T14:41:40","date_gmt":"2021-02-18T14:41:40","guid":{"rendered":"https:\/\/42crdev.prexihost.com\/?p=12688"},"modified":"2022-11-28T14:50:15","modified_gmt":"2022-11-28T14:50:15","slug":"webinar-api-security-in-a-kubernetes-world","status":"publish","type":"post","link":"https:\/\/staging2022.42crunch.com\/webinar-api-security-in-a-kubernetes-world\/","title":{"rendered":"API Security in a Kubernetes World"},"content":{"rendered":"\r\n

Webinar<\/h4>\r\n

May 4th, 2022 | 8am PST | 4pm BST<\/p>\r\n

Securing APIs deployed in Kubernetes implies securing the infrastructure, but also the APIs themselves. Having a perfectly setup cluster, with all possible protections in place, is only ONE aspect of the measures you need to take to prevent the vulnerabilities listed in the OWASP API Security Top 10. Other issues such as data leakage, mass assignment or broken authentication must be handled at the application level.<\/p>\r\n

Although the OWASP API Security Top 10 list is not specific to Kubernetes, Kubernetes deployments created to run microservices-based, decoupled applications, increase the risk and the impact of API security problems just by the sheer number of APIs to manage and protect. In Kubernetes deployments, everything is an API. Enterprises end up having to protect 1000’s of endpoints, and to make it worse, those endpoints get re-deployed very frequently.<\/p>\r\n

You may think you’re covered if you’re using a service mesh, but services meshes policies only cover some aspects of security, mostly at communications level.<\/p>\r\n

In this webinar, we will:<\/p>\r\n