(Read More at https://isc2-eastbay-chapter.org/mission-vision-goals/scholarship-and-sponsorship/)

Learn how you secure your APIs and Microservices using Externalized Dynamic Authorization.

Key agenda items

• Covering API security basics
• Avoiding bad security practices
• Overcoming OAuth limitations
• Managing authorization as a microservice

Thanks for sharing the ISC2 EB chapter meeting presentation and the links to more information.

• https://www.axiomatics.com/resources/topics/apis-microservices/
• https://www.axiomatics.com/resources/authorization_kong/
• https://www.axiomatics.com/resources/dynamic-authorization-for-the-apigee-api-gateway/
• https://github.com/ioannis-iordanidis/kong-axiomatics-plugin

About our Speaker: 

Jonas Iggbom, the VP of Sales Engineering at Axiomatics, has over 20 years of experience in product management and technical sales in endpoint security and access control. His expertise lies in encryption technologies, keys, certificates, and SSH, as well as access control solutions for privileged and end user accounts, databases, and applications.

Prior to Axiomatics, Jonas worked as the Director of Product Management at Fox Technologies and as a Product Manager at Check Point Software Technologies, both in California. He also held the position of Senior Sales Engineer/Product Manager at Pointsec Mobile Technologies in Chicago and Sales Engineer at their office in Stockholm, Sweden.

Jonas earned his bachelor’s degree in computer science from the Royal Institute of Technology in Kista, Sweden. Along with his expertise in encryption technologies and access control solutions, Jonas is also knowledgeable in intrusion detection, anti-virus, data leakage prevention, content control, and client virtualization.

Thanks to our topic sponsor: Axiomatics authorization solutions are utilized around the world to share sensitive data securely, meet compliance and minimize data fraud. From our offices in Chicago and Stockholm we serve a global customer base within finance, healthcare, insurance, manufacturing, media, pharma, software/high tech and the public sector. Our dynamic authorization suite for applications, databases, Big Data, APIs and Microservices enables a policy-based approach to access control to protect the most critical assets – on premise or in the cloud. Our product suite is built on Attribute Based Access Control (ABAC) in accordance with National Institute of Standards and Technology (NIST) guidelines. For the US Federal Government, Axiomatics is a member of the CDM program and actively participates in the GSA schedule. Website http://www.axiomatics.com

Session 2: Leon Jiang sharing his analysis of the Capital One Data Breach

8:15 – 8:45

Read More https://www.roostify.com/blog-home/2019/7/31/capital-one-data-breach-step-by-step-analysis

Lessons Learned from Capital One Breach & More