API Security Day - Pune

In a world where APIs have become so critical to the proper functioning of mission-critical applications, how do organizations ensure that their APIs are constantly evaluated for their security and performance issues?
API security India meetups are free events that bring the cloud API security community together to connect, collaborate, and learn about API security and Observability.

Join the API Security community on discord: https://discord.gg/NvXBX4Jd2v . We are organizing this event in collaboration with AWS UG Pune (https://www.meetup.com/puneawsug) and OWASP Pune (https://www.meetup.com/owasp-pune-chapter/).

Agenda:
10:30 AM - 10:45 AM: Welcome Note by Organizer
10:45 AM - 11:15 AM: Session 1
11:15 AM - 11:45 AM: Session 2
11:45 AM - 12:00 AM: Session 3 - Lightening Talk
12:00 PM - 12:30 PM: Lunch & networking
12:30 PM - 1:00 PM: Session 4
1:00 PM - 1:30 PM: Session 5
1:30 PM - 2:00 PM: Session 6
2:00 PM - 2:15 PM: closing & giveaways

Sessions:
Talk 1: Protect what matters!
Speaker: Shubham Jindal, Technical Lead, TraceableAI
Linkedin: https://www.linkedin.com/in/shubham-jindal-67b69048/
Abstract: We will learn about the security posture of APIs in the current micro-services world, through OpenAPI specifications, sensitive data, and conformance analysis. We would also deep-dive into OpenAPI structure and conformance analysis terminologies.

Speaker bio: Shubham Jindal works as a technical lead at TraceableAI. He manages the API catalog team, responsible for tracking APIs, and deriving meaningful API behaviors.
------
Talk 2: API testing methodology
Speaker: Jyoti Raval, Staff Product Security Engineer, Harness
Linkedin: https://www.linkedin.com/in/jyoti-raval-61565157/
Abstract: In this talk, we will learn about how APIs are changing the software development world and how we can security test those APIs. We would also look at some popular API specifications and testing methodology to hack them to secure them eventually.

Speaker Bio: Jyoti Raval works as a staff product security engineer at Harness. She is author of the tool phishing simulation and presented at Defcon, Blackhat, Nullcon before. She heads the OWASP Pune chapter.
------
Talk 3 [Lightening Talk]: SecOps automation with Open Source
Speaker: Shloka Bhalgat, Senior member of technical staff, Unskript
Linkedin: https://www.linkedin.com/in/shlokabhalgat/
Abstract: In this talk, join us to learn how to harness the power of automation, and use open-source tools and data sources to build API Security runbooks.
------
Talk 5: vPrioritizer: the art of risk prioritization
Speaker: Pramod Rana, Manager - Application Security, NetSkope
LinkedIn - https://www.linkedin.com/in/pramod-rana-696ba062/
Abstract: In today's time more vulnerabilities become known to the industry than any organization can triage, action and monitor. Due to this modern software development process is focusing on reducing the risk rather than eliminating it and vulnerability management is equal to risk prioritization – fix first what matters most. vPrioritizer is designed with this objective in mind.
Speaker bio: Pramod is an author of Omniscient, vPrioritizer leads the application security team in Netskope.
------
Talk 4: Digital Payments, APIs, and Security.
Speaker: Christoph Johnson, DevOps team Lead, Easebuzz
LinkedIn - https://www.linkedin.com/in/christoph-johnson-0388a716a/
Speaker bio: DevOps Engineer at Easebuzz with experience in designing = PCI-DSS compliant cloud infrastructure, currently working on implementing microservice architecture and chaos engineering.
-----
-----
Talk 6: Demystifying cloud security with AWS: fundamentals and best practices
Speaker: Vishal Alhat, Senior Engineer, Forcepoint Inc.
Linkedin: [https://www.linkedin.com/in/vishalalhat ](https://www.linkedin.com/in/vishalalhat)
Abstract: With organizations moving their workloads, applications, and infrastructure to the cloud at an unprecedented pace, the security of all these resources has been a paradigm shift for all those who are responsible for security. In this talk, we will dive deep into various aspects such as the security model, compliance, access management, and much more to build and maintain a secure environment.
------

Note: If you are interested in delivering a talk at our upcoming meetup, please fill out this form: https://forms.gle/HaEJx64AwpgB3yLX7

Regards,
API Security India community