APIs are one of the key drivers behind the widespread growth of software applications: From backend servers to mobile apps, and from one online service to another, incredible amounts of user interactions and data are traversing API-enabled applications. However, this rapid expansion has created a substantial attack surface that isn’t widely understood.

In his presentation “API Security – Divide and Conquer”, Tom Zaubermann will present the OWASP API Security Top 10 list of most dangerous API attacks (including a live abuse demo) and explain which Best Practices developers can follow to mitigate the risks associated with these attack scenarios.

This talk is intended for developers of any programming language who want to gain a deeper understanding of the significant risks associated with using APIs.

Tom Zaubermann is the Co-Founder and CEO of Zyberum GmbH and Luchs Security GmbH. Previously leading the InCar Security Testing Lab at Volkswagen AG (Group), he specialized in embedded penetration testing and secure development for Electronic Control Units (ECUs). With a background as a CISO and a global IT security consultant, his work spans secure software development, DevSecOps and Penetration Testing. A frequent speaker at international conferences like DevCon, CodeTalks, HITB and others, Tom shares expertise on secure coding, threat modeling, and integrating security into the any development lifecycle by following the ‘Secure by Design’ approach.

We are looking forward to spending an interesting evening with lots of learning with you & Tom! We'll meet at the conference room Die Kabine and we'll order some pizza together. Tom will hold his presentation in English. 

Your GDG team,

Mira, Marvin & Timofey