The OWASP API Security Top 10: An Overview

The OWASP API Security Top 10: An Overview

41mIntermediate2023-02-10

Authors

Davin Jackson

Davin Jackson

Engineer, Pentester, Host of InfoSec Unplugged and Hacker Valley Blue

Course details

Want to learn more about securing APIs? Check out the OWASP API Security Top 10, a list of security vulnerabilities compiled and published by the Open Web Application Security Project. In this course, instructor Davin Jackson shows you how APIs really work so you can get up and running with securing them and better protect your applications. Find out why it’s so important to develop your security management skills, especially as more and more applications become increasingly API driven. Get tips along the way on dealing with common API vulnerabilities, including broken object-level authorization, broken authentication, excessive data exposure, lack of resources and rate limiting, mass assignment, and more.

Skills covered

Application SecurityAPIsCybersecurityLearningSoftware Development

Concepts

Introduction

  • Don't be the next data breach
  • What you should know

Introduction to APIs

  • What are APIs
  • Security concerns
  • OWASP and the OWASP API Security Project

The OWASP Security API Top 10

  • API1 - 2019 broken object level authorization
  • API2 - 2019 broken authentication
  • API3 - 2019 excessive data exposure
  • API4 - 2019 lack of resources and rate limiting
  • API5 - 2019 broken function level authorization
  • API6 - 2019 mass assignment
  • API7 - 2019 security misconfigurations
  • API8 - 2019 injection
  • API9 - 2019 improper assets management
  • API10 - 2019 insufficient logging and monitoring

Conclusion

  • Keep learning
40,000 Toman