< session />

Securing the Digital Landscape: A Deep Dive into OWASP Top 10 for Applications, APIs, and LLMs

Tue, 22 April

Join us for an immersive journey into the heart of modern cybersecurity challenges. In this groundbreaking talk, we will explore the intricacies of securing digital assets with a focus on three critical domains: applications, APIs, and Large Language Models (LLMs). As developers and architects, you understand the paramount importance of safeguarding systems against evolving threats. This session offers an exclusive opportunity to examine the industry-standard OWASP Top 10 vulnerabilities tailored specifically to your domain.

Uncover the vulnerabilities lurking within your applications, APIs, and LLMs, and gain invaluable insights into mitigating risks and fortifying your defenses. Through live demonstrations and real-world examples, you'll witness firsthand the impact of security breaches and learn proactive strategies to combat them. Whether you're an architect aiming to strengthen your organization's security posture or a developer building resilient systems, this talk equips you with the knowledge and tools essential for navigating the complex landscape of cybersecurity.

Agenda:

  • OWASP Top 10 Overview:

    • Introduction to OWASP
    • Significance of the OWASP Top 10
    • Overview of OWASP Top 10 for Applications, APIs, and LLMs
  • OWASP Top 10 for Application Security:

    • Presentation: Common vulnerabilities and mitigation strategies
    • Demonstration: Live examples of application security vulnerabilities
  • OWASP Top 10 for API Security:

    • Presentation: Key challenges in API security and best practices
    • Demonstration: Illustration of API security vulnerabilities and attacks
  • OWASP Top 10 for LLM Applications (Large Language Models):

    • Presentation: Unique security concerns in LLM applications
    • Demonstration: Showcase of LLM security vulnerabilities and risks
  • Q&A and Discussion:

    • Open floor for questions and discussion
  • Conclusion:

    • Summary of key takeaways
    • Call to action: Implementing security best practices

Target Audience: This session is primarily aimed at Security Professionals and Software Architects, as they are responsible for designing and implementing secure systems, including applications, APIs, and LLMs. Back-end Developers will also benefit from understanding the OWASP Top 10 vulnerabilities and how they can secure their code and systems. Additionally, OpsTech Professionals may find value in understanding security vulnerabilities and their impact on operations and infrastructure.

< speaker_info />

About the speaker

Rohit Bhardwaj

Director of Architecture, Expert in Cloud-native Solutions

Rohit Bhardwaj is a Director of Architecture working at Salesforce. Rohit has extensive experience architecting multi-tenant cloud-native solutions in Resilient Microservices Service-Oriented architectures using AWS Stack. In addition, Rohit has a proven ability in designing solutions and executing and delivering transformational programs that reduce costs and increase efficiencies.

As a trusted advisor, leader, and collaborator, Rohit applies problem resolution, analytical, and operational skills to all initiatives and develops strategic requirements and solution analysis through all stages of the project life cycle and product readiness to execution.
Rohit excels in designing scalable cloud microservice architectures using Spring Boot and Netflix OSS technologies using AWS and Google clouds. As a Security Ninja, Rohit looks for ways to resolve application security vulnerabilities using ethical hacking and threat modeling. Rohit is excited about architecting cloud technologies using Dockers, REDIS, NGINX, RightScale, RabbitMQ, Apigee, Azul Zing, Actuate BIRT reporting, Chef, Splunk, Rest-Assured, SoapUI, Dynatrace, and EnterpriseDB. In addition, Rohit has developed lambda architecture solutions using Apache Spark, Cassandra, and Camel for real-time analytics and integration projects.

Rohit has done MBA from Babson College in Corporate Entrepreneurship, Masters in Computer Science from Boston University and Harvard University. Rohit is a regular speaker at No Fluff Just Stuff, UberConf, RichWeb, GIDS, and other international conferences.