Stepan Ilyin

Verified expert

Stepan is a cybersecurity expert proficient in Python, Java, and C++. With a deep understanding of security frameworks, technologies, and product management, they ensure robust information security programs. Their expertise extends to CI/CD, API, and application security, leveraging Machine Learning and Data Science for innovative solutions. Strategic acumen in sales and business development, coupled with compliance knowledge, shapes Wallarm's success in the dynamic cybersecurity landscape.

API Security

API Security OWASP

OWASP

DevSecOps

Attacks

Pentest

Vulnerabilities

WAF

Experience:

‍Wallarm
San Francisco, Bay Area, Full Time

Co-founder

Jan 2016 - Present · 8 yrs 1 mo

‍

Skills:

Proficient in programming languages: Python, Java, and C++ for developing security tools, automating security tasks, and analyzing security data.
Familiarity with security frameworks: NIST Cybersecurity Framework and ISO 27001 for implementing and managing information security programs.
Experience with security technologies: Firewalls, intrusion detection/prevention systems (IDS/IPS), security information and event management (SIEM) systems, and vulnerability scanners for securing networks and systems.
Proficient in product management: Methodologies and tools for defining product roadmaps, creating product requirements, and managing product releases.
Familiarity with security product development lifecycle: Understanding of security features such as authentication, authorization, encryption, and audit trails.
CI/CD, API, and application security: Knowledgeable in Continuous Integration/Continuous Deployment (CI/CD) practices, API security, and comprehensive application security programs.
Expertise in Machine Learning, Artificial Intelligence, Data Science, and Big Data Analytics: Utilizing advanced technologies to enhance security measures.
Sales, Business Development, and Executive Management: Well-rounded skills for ensuring the success and growth of the organization.
Strong understanding of information security principles and compliance: Robust knowledge of information security principles, risk management, and compliance regulations, including familiarity with industry standards such as GDPR, HIPAA, PCI DSS, etc.

‍

More from the author

DDoS Mitigation

A Comprehensive Guide to DDoS Mitigation: In-Depth Analysis and Strategies

Recommendations to Prevent Bad Bots on Your Website

Understanding and Counteracting Bad Bots: A Safety Net for Your Website

Data Sovereignty

Unleashing the Full Potential of Data Sovereignty: A Comprehensive Analysis

Data at Rest

Master the Art of Protecting Data at Rest via This Ultimate Guide

Separation of Duties

Driving Business Growth with Separation of Duties: Strategies, Case Studies, and Future Trends

Site Scanning Probing

Explore the Underworld: Deep Dive into Site Scanning/Probing for Enhanced Security Measures

R.U.D.Y. (R-U-Dead-Yet?)

Unveiling R.U.D.Y: A Detailed Examination of the Persistent Cyber Threat

DDoS Attack Scripts

The Evolution of DDoS Attack Scripts: Trends, Threats, and Future Predictions

Round Trip Time (RTT)

Round Trip Time Simplified: Understanding RTT and Its Implications

Cloud Governance

Breaking Barriers: Implementing and Optimizing Cloud Governance in Business

SAST, DAST, IAST, and RASP

Mastering SAST, DAST, IAST, and RASP: The Quintessential Guide to Application Security Testing

Cybercrime

Cybercrime Unleashed: Comprehensive Guide to Understanding and Combating Digital Threats

Data Migration

The Technical Odyssey: Navigating the Intricacies of Data Migration

Data Discovery

Navigating the Data Discovery Labyrinth: A Simple, Straightforward Guide

Log Aggregation

Simplifying Log Aggregation for the Layman: Clear, Comprehensible and Unique

Log Parsing

Log Parsing: Simplified and Comprehensive Guide for Superior IT Security

What is IT Security?

The ABCs of IT Security: A Beginner’s Guide to Cyber Protection

TrickBot Malware

Surviving the TrickBot Invasion: Comprehensive Guide to Recognise, React, and Recover

Log Analysis

Log Analysis Simplified: Optimized Processes for Improved Security Measures

File Integrity Monitoring

Beyond the Basics: An Agentless Approach to File Integrity Monitoring

SEO Poisoning

Insider’s Guide to SEO Poisoning: Protect Your Visibility in Google’s Top 5

Log Rotation

En Route Log Rotation Success: Streamline Your Log Management Process

Remote Monitoring and Management (RMM)

Harnessing the Power of RMM: Your Comprehensive Guide to Remote Monitoring and Management

Log Management

Unfolding the Layers of Log Management: Your Key To A Secured Network Infrastructure

Ransomware Detection

Decoding Ransomware: Techniques for Effective Detection and Prevention

External Attack Surface Management (EASM)

Mastering External Attack Surface Management: A Comprehensive Guide

Spear Phishing vs. Phishing

Grasping the Subtle Distinctions: Spear Phishing vs. Phishing - The Ultimate Guide

Domain Spoofing

Domain Spoofing Decoded: A Comprehensive Guide to Cyber Threats

Infrastructure Monitoring

Boost Business Growth with Robust Infrastructure Monitoring: Comprehensive Techniques and Methods

Logging as a Service (LaaS)

LaaS Unleashed: Everything You Need to Know about Logging as a Service

Mobile Malware

Understanding Mobile Malware: Securing Your Smartphone in the Cyber-Age

What is Network Security?

Understanding Network Security: Hold the Key to Your Digital Safety

Security Automation

Unleashing the Power of Security Automation: Mapping the Future of Cyber Protection

What is Server Monitoring

Server Monitoring Decoded: Master the Tools and Techniques of Effective Server Management

A10:2021 OWASP – Server Side Request Forgery

OWASP – Server Side Request Forgery. See how attackers exploit a vulnerability in your server to execute dangerous code. Learn how to secure your app.

A08:2021 OWASP – Software and Data Integrity Failures

Understand the risks of A08 OWASP Top 10, including code tampering and injection attacks. Protect from software and data integrity failures. 🛡️

A04:2021 – Insecure Design Owasp: Know Everything

Insecure Design vulnerability is broad, explains many weaknesses as absent and unproductive control design. Learn what it means, examples, solutions. 📙

A02:2021 – Cryptographic Failures Owasp: Know This Cyber Trouble Better

The OWASP cryptographic failure is responsible for the leaking of data of critical nature to ill-intended people. Examples, how to prevent ?

A10: Insufficient logging and monitoring 2017 OWASP

👉 "Insufficient logging and monitoring" is in hard to detect but it’s also hard to protect from. There are several ways we can protect ourselves from this vulnerability

A9: Using Components with Known Vulnerabilities 2017 OWASP

Don't leave your security exposed. Learn about A9 from the 2017 OWASP Top 10 and how to prevent using components with known vulnerabilities. 🔒

A8: Insecure Deserialization 2017 OWASP

👉 Insecure serialization has historically been considered a very difficult vulnerability to understand, in this article we will try to explain it to you in detail

A7: Cross-Site Scripting (XSS) 2017 OWASP

We will look at what it takes to look for all kinds of XSS (Cross-Site Scripting) attacks in all sorts of contexts - how to test for cross site scripting, famous examples, types, impact.

A6: Security Misconfiguration 2017 OWASP

👉 Guide to testing security misconfigurations by looking at the common properties of all the problems we can find in the descriptions and actions.

A5: Broken Access Control 2017 OWASP

Broken Access control vulnerability is designed to grant or restrict rights to certain users in the application. Let us learn more about this attack, its examples, types, impact and prevention.

A4: XML External Entities (XXE)

An XXE (XML External Entities) attack occurs when malicious actors send off data in one of the XML formats they have control over. Let us take a closer look at this vulnerability, its examples and prevention.

A3: Sensitive Data Exposure 2017 OWASP

Understand the risks of A3 OWASP Top 10. Discover best practices for securing from Sensitive Data Exposure. Stay compliant 🛡️

A2: Broken Authentication 2017 OWASP

Explore A2:Broken Authentication attack, what is its impact. When authentication problems and session management vulnerability arise, it is connected with wasp weak password policy.

A1: Injection 2017 OWASP

There is a range of different sql injection attacks that can occur and we will be discussing them in this article. Explore a vulnerability such as A1:Injection

Insufficient Logging and Monitoring API10

Insufficient Logging And Monitoring API10: Don't overlook the importance of logging and monitoring in security. Learn how to detect and respond to threats.

Improper Assets Management

Get definition of API9 vulnerability, caused by improper assets management. Learn about the risks of this vulnerability and how to avoid it. 🤔

API8: Injection

👉In this article, we will tell you about such a threat as Injection. Let's take a look at what it is, an attack scenario, ways to detect and defend it.

API7 Security Misconfiguration

Security Misconfiguration API7: Ensure proper configuration of servers, apps, and network devices. Learn how to avoid vulnerabilities and prevent attacks. 🛡️

Mass Assignment

In this article, we will tell you about such a threat as api Mass Assignment. Let us take a look at what it is, examples, an attack scenario, how to detect and protect them.

Broken Function Level Authorization

In this article, we are going to tell you about api Broken Function Level Authorization. This vulnerability can be quite complex and varied.

Lack of Resources and Rate Limiting

In this article, we will tell you about such a threat as no rate limit vulnerability. Let us take a look at what it is, examples, how to detect and protect them.

Excessive Data Exposure

Excessive Data Exposure. Learn about the vulnerability API3, and how it can expose sensitive data to attackers. Find out how to prevent this threat.

Broken User Authentication

Broken authentication vulnerability means that the user's session ID or credentials have been stolen. Examples, preventive measures against it.

Broken Object Level Authorization (BOLA)

Definition of Broken Object Level Authorization. Main types, examples of threats, acсess control. How to detect and to defend against this attack?

Meet Wallarm at RSA 2024!