Скачать или смотреть Secure System Integrations - Tobias Ahnoff - NDC Security 2025

This talk was recorded at NDC Security in Oslo, Norway. #ndcsecurity #ndcconferences #security #developer #softwaredeveloper

Attend the next NDC conference near you:
https://ndcconferences.com
https://ndc-security.com/

Subscribe to our YouTube channel and learn every day: ‪@NDC‬

Follow our Social Media!

  / ndcconferences  
  / ndc_conferences  
  / ndc_conferences  

#application #security #architecture #api #http

Integrations between backend services, without human interaction, is a requirement for most businesses.

Over the years this has been done in many ways, using e g file transfers, message buses and APIs to fit business requirements, compliance and relevant threat models. Some solutions are less secure than others and integrations often introduce risk and attack vectors.

This presentation addresses infrastructure and application layer defenses to meet high security requirements for common types of integrations. In particular for HTTP APIs - from HTTPS, API-keys and Basic Authentication to OAuth2 with mutual TLS, Private Key JWT and DPoP.