Avoiding GraphQL insecurities with OWASP SKF 🚀 [en,youtube]📺🍿🇮🇹🇳🇱🇭🇺🇧🇪
Details
This virtual meetup will be live on Youtube with chat.
Beer and kitchen self-serviced. :)
### About
GraphQL is quickly becoming the alternative to REST API, being able to request a specified set of data across multiple resources within a single request. But with great power comes great security risks. A single point of failure could allow attackers to create complex queries and exhaust resources (DoS), or bypass authorization to retrieve unauthorized information. This talk is a perfect match to boost your GraphQL skills, and learn how to exploit wrong implementations of the framework. Also next to that we will show that with the OWASP-SKF tool you can spot these possible vulnerabilities in an early stage by selecting the right security requirements for your development project and create the right awareness and guidance to prevent these mistakes.
Duration: 60' talk/workshop + QA + chatting
Language: EN
### Speakers
Glenn ten Cate [NL/BE]: https://www.linkedin.com/in/glenn-ten-cate/
Originally from the Netherlands, currently security chapter leader at ING Belgium. He breathes computer code. Where did it all start? “With a computer game.” 🎮 At 13 he discovered that some of his opponents had hacked the game, Glenn also wanted to be able to do it. Project leader of the OWASP flagship project Security Knowledge Framework, gives security courses at companies through his company defdeveu, and he also potters around with small hardware projects when he has time. Why would he dedicate his whole life to the world of hacking? “Because I would like to make the digital world just a little safer. What started out as a hobby and a passion is now my career.”
Davide Cioccia [IT/NL]: https://www.linkedin.com/in/davidecioccia/
Being in love with everything around computers, joined the cybersecurity scene together with Stuxnet ☢️ (which he had analysed). Today Davide is a security engineer at ING Netherlands, also contributing to the OWASP Mobile Security Testing Guide. His interests vary from mobile security to botnet and phishing analysis, but also IoT and SCADA. Founder of the DCODX.com.
Backup link:
https://youtu.be/aP4DsNPS7Jo
