奇安信攻防社区-【2024补天白帽黑客大会】主动防护视角下的API安全实践

【2024补天白帽黑客大会】主动防护视角下的API安全实践

演讲议题：主动防护视角下的API安全实践

### Spaker：翁伟刚(Ske)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-01.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-73c0858f9a1f9624f2b6e95c59d7ce4d9213c5e5.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-02.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-0f3273283791390eda68fe0956e4a5fbfa5fae37.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-03.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-18eaa02997a9153b13efe6b40f65cd556f2535c5.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-04.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-acbc13a785950f4e263831c6896eefc3dac4b795.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-05.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-667077dd31dc7760c23fef6a2d25ffaf327a0b66.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-06.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-e07adb1687547571b497d81327e39a3fb72b4b54.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-07.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-5be978226722f628d01379ddd489e7057849cd0b.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-08.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-cb1e48b8cf8f63429b652311c4a0dd06c3fad17e.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-09.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-5669203d31ad0bfb6a883053e6d19f124c377e77.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-10.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-e00954414633ac0a0261a30ced44a74f6706b17a.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-11.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-4c2f978b89d5570f516acbca20717dc1065e946b.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-12.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-c070fb7d33ff735a12bf059c87707abd53a3d6bf.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-13.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-895e41d0db7ffb2586b6eac28aecfea69c7dad70.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-14.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-36578498164b6ab972b935f5362ca435da15cb9f.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-15.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-13737b77836613cdfb04c9481da80f13e2967aaf.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-16.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-273df7e9c81f6e73e30170bc92832c44da3e0d59.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-17.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-b83aa7cfc753406677a7069c9a11fba19a5dd744.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-18.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-b499dc6d002d0e39f7e54350070a54c0dcfd3781.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-19.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-690211d097d79e1c78f841605290f7d724a57259.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-20.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-dd194dab5b60c51d125cf536e95ed0704115b267.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-21.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-4ac24af388df679a5b89fc6398e10b84fcbe1254.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-22.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-dde222ea6586eedc5615bc1854958d8d9fe2a71a.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-23.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-31e7ce2fd5f844210b9271c8a724bc67cbba86cd.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-24.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-39ba2bddc22020e1071fb32b6e78b4ab5d965921.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-25.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-aa76cd720c51e3681002cf8e7f843c576351309e.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-26.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-225dc999af075e11c7dd145121544a6d18bbd574.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-27.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-ed79bcf6a2d0ddefb12ecd8db5bbcd0abfce48bf.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-28.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-80a517fbe581e8b0da4b7924e54bd65084d655c5.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-29.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-8fb0f49bef138c7cd2a02ceae210866ca70ca02c.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-30.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-352831b0b16980df959c1c2c70703f60921cd293.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-31.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-888499de798fff0d92204941f7cf5b5e9234a349.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-32.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-24146f3b5587a9d42e58e52a8de718251f8d78fb.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-33.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-5472f20959f387eb597bad6b54cf363ea9e75c2f.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-34.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-d2136fe214f6c5c07e4ce915f0e192d051006f3f.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-35.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-eee1bccf8d705079efaa0117cc05b93b1337967f.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-36.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-ebae20fe87f56e79a386a41a65e89c9ec6df7a39.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-37.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-b989ade4948fc612ad5674045c1dde0ddf1c0a82.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-38.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-eb1fb28aaf71ce4c2c8a7c3444d263ca0602a8f0.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-39.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-c7b754598bef39aeb455e0be4b2f6355f076ab51.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-40.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-d265b104fb027f320494d5470d6adeeb2b9a8963.png)

![2024补天白帽大会-实网攻防演练分论坛3-API攻击面管理：主动防护视角下的API安全实践-41.png](https://cdn-yg-zzbm.yun.qianxin.com/attack-forum/2024/10/attach-331a7c0e9eaa9dfd219bbfcec785097f8e9eb29a.png)

发表于 2024-10-25 11:50:30
阅读 ( 3461 )
分类：其他

【2024补天白帽黑客大会】主动防护视角下的API安全实践

1 条评论