Akansha Shukla - Modern AppSec: Securing APIs with Threat Modeling and DevSecOps

02/09/2025 35 min Temporada 12 Episodio 16
Akansha Shukla - Modern AppSec: Securing APIs with Threat Modeling and DevSecOps

Listen "Akansha Shukla - Modern AppSec: Securing APIs with Threat Modeling and DevSecOps"

Episode Synopsis

Our guest today is Akansha Shukla, an information security professional with over 10 years of experience in application security, DevSecOps, and API security. We’re discussing why API security remains one of the least mature areas of AppSec today and exploring the challenges developers face when securing APIs. Akansha shares her insights on incorporating APIs into threat modeling exercises, the ongoing struggles with API discovery and inventory management, and the authorization challenges highlighted in the OWASP API Security Top 10. The conversation also touches on whether "shift left" is truly dead and why we still haven't solved basic security problems like input validation despite having the frameworks to address them.FOLLOW OUR SOCIAL MEDIA: ➜Twitter: @AppSecPodcast➜LinkedIn: The Application Security Podcast➜YouTube: https://www.youtube.com/@ApplicationSecurityPodcast Thanks for Listening! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~