OWASP Meetup in Singapore

Ashwath (co-author of ATOR Burp Plugin) and Avneesh (employee of Akto) will be doing a hands-on walkthrough of API security and talk about automating testing for complex API scenarios.

They will cover the following topics:

1. What is API Security

2. Why is it important?

3. Why do BB hunters find more bugs than appsec/internal folks?

4. Common problems with API Security

5. Automated tools that are in the market:

   • Burp native scanning

   • Burp plugins - ATOR

   • Akto open source

6. Running ATOR against some basic scenarios - Demo & Hands on

7. Running Akto against a test setup - Demo & Hands on

8. Q&A

9. Wrap-up