Nikita Stupin

Information Security Analyst, mail.ru

Nikita Stupin is Information Security Analyst at Mail.Ru Group where he secures range of web applications with most focus on email and cloud services for individuals and enterprise. In a free time he loves bug hunting at HackerOne platform to help other companies build their security. You can find him at hall of fame of companies as GitHub, Airbnb, Semrush, Yandex and more. He has spoken at multiple conferences including Insomni’Hack and OFFZONE.

Social Profiles

All Sessions by Nikita Stupin

  • Main Track / Tech Track


  • 14:45  - 15:10
    GraphQL is relatively new technology which is used by more and more companies nowadays. While GraphQL solving major problems of the REST APIs at the same time it introduces significant growth of server-side complexity which naturally increases chances for vulnerabilities. In this talk you'll learn about core concepts of GraphQL and its components. On that basis common security pitfalls of GraphQL API implementations will be shown as well as how to prevent them systematically. Research is based on real-world bug hunting experience of multiple people (including the speaker) as well as best practices of GraphQL API secure implementation from world companies.




Share

Nikita Stupin