API Security Assurance via E2E Testing - Alex Mor

Description
E2E testing engineers are the `final frontier` before a change is deployed into production. They could function as a security champion. By introducing API security assurance into E2E testing, while promoting the engineers to come up with security edge cases, typically in the form of a threat modeling activity, an application could be continuously designed and tested to be secure, starting with its MVP release.

Speaker
Alex Mor, AB InBev, Application Security Director

-

Managed by the OWASP® Foundation …

alex api api security assurance cases change e2e edge edge cases engineers frontier function modeling security security assurance security champion testing threat threat modeling