Beyond OAuth: Securing APIs with Policies & Attribute-Based Access Control
Details
Given the popularity of APIs and microservice-based application development, it is no surprise that API security is also a topic of high interest. OAuth and OpenID are the most common API security standards in use, but are not a one-size-fits-all proposition. Beyond these protocols, there is a need to provide fine-grained security on the messages flowing through the APIs to control what transactions and data may be accessed.
In this engaging session, David Brossard of Axiomatics will illustrate where OAuth and OpenID limitations can be addressed by adding in the complementary functionality of the Attribute Based Access Control (ABAC) standard. ABAC, OAuth and OpenID Connect standards can work together in meeting the broadest range of security requirements when sensitive or regulated data is accessed via APIs, providing a more comprehensive security formula than when using OAuth alone. Time permitting, we will provide a live demonstration.
This event is graciously hosted by Axiomatics!
Agenda:
5:30 – 6:15 – Food / Beverages and Networking
6:15 – 7:30 – Presentation
7:30 – 8:00 – Networking
Location:
Axiomatics --- 15th Floor Conference Room
525 W. Monroe Suite
Chicago 60661
David Brossard’s Bio:
David Brossard, Vice President of Customer Relations at Axiomatics, directs pre-sales, post-sales, and support teams. Prior to this role, he served as product manager and worked as a Solutions Architect, specializing in IAM and focusing on customer solutions design and implementation.
David earned his master’s degree in engineering from the National Institute of Applied Sciences in France. He is an active member of the OASIS XACML Technical Committee and Trust Elevation Technical Committee. He is also a Sun Certified Architect and a Certified Ethical Hacker (Certified Security Testing Professional).