Attackers want your data and they're getting it from your API - Tim Bond

This talk focuses on API security, addressing the vulnerabilities inherent in exposing your API to potential attackers. The speaker demonstrates techniques for traffic analysis and discusses authentication strategies, specifically comparing API keys and OAuth2, while highlighting their strengths and weaknesses. Key topics also include practical measures for hardening API security, such as TLS encryption, certificate pinning, HMAC request signing, and obfuscation techniques. By the end of this session, attendees will gain insights into the methods attackers use and learn actionable steps to enhance their API's security posture.