Coursera Flash Sale
40% Off Coursera Plus for 3 Months!
Grab it
Explore a comprehensive conference talk from NDC Security 2025 where Tobias Ahnoff addresses the critical challenges of secure system integrations. Learn how backend services can be securely connected without human interaction—a necessity for most modern businesses. Discover the evolution of integration methods from file transfers and message buses to APIs, and understand the security implications and attack vectors each approach introduces. The presentation provides detailed insights into both infrastructure and application layer defense mechanisms designed to meet stringent security requirements for various integration types. Particular focus is given to HTTP APIs, covering everything from basic HTTPS and API-keys to advanced authentication methods like OAuth2 with mutual TLS, Private Key JWT, and DPoP. Gain valuable knowledge about architecting secure connections between systems while balancing business requirements, compliance needs, and relevant threat models.
