The OWASP Top 10 is widely known, but fewer developers are familiar with its sibling: the OWASP API Security Top 10. In an era where nearly every web application relies on APIs, understanding these risks is critical.

This talk explores how the API Top 10 came about and walks through each category. We'll focus on what the list means in practice for ASP.NET Core developers, highlighting the most relevant threats and showing how to mitigate them using technology-specific patterns and features. A must-see session if your application exposes or consumes APIs!

You will learn:

• Understanding common API security risks
• Mitigating common API security risks
• Understanding specific safeguards in ASP.NET Core Web API