CHCon 2023

James Cooper

James Cooper holds a Ph.D. in Computer Science and works as a Security Developer at Cosive New Zealand. There, he spends most of his time working on Web applications such as Phishfeeder, with occasional side-lines in other tasks like developing third-party MISP integrations with customers' products or debating the merits of various programming languages and paradigms. He also spends too much time in the InfoSecNZ Discord and making Simpsons references.


Session

11-24
09:45
30min
Securing REST API Endpoints (or, How to avoid another Optus)
James Cooper

Optus and its customers had a very bad time in 2022, with a massive data breach resulting in PII being released into the wild. This apparently happened because a REST API was not properly secured. We’ll talk about practical steps you and your organisation can take to prevent this from happening to you.

Main Track
Ngaio Marsh Theatre