

Episode 16: OWASP API Hacking and DevSec with Matt Tesauro
Nov 16, 2022
Matt Tesauro, a Distinguished Engineer at NoName Labs and an OWASP Global Board member, dives into the realm of API security and DevSecOps. He discusses the evolution of Defect Dojo, a tool streamlining vulnerability management, and the pressing challenges of API security. The conversation covers the importance of machine learning in monitoring API behavior and the essential role of manual penetration testing in CI/CD pipelines. Tesauro emphasizes community collaboration in enhancing application security practices.
Chapters
Transcript
Episode notes
1 2 3 4 5 6
Intro
00:00 • 2min
Defect Dojo: Transforming Security Management
01:56 • 4min
Navigating API Security Challenges and the Role of Machine Learning
06:21 • 2min
Enhancing API Security through Penetration Testing
08:22 • 13min
Understanding OWASP and Application Security
21:18 • 9min
Engaging Conversations in Cybersecurity: The OWASP Podcast
30:25 • 3min