Cybersecurity › Application Security › API Security
Introduction
Introduction to API Security
Application Programming Interfaces (APIs) are the connective tissue of modern microservices, single-page applications, and mobile apps. Because APIs expose underlying business logic and sensitive data directly to the internet, they are a primary target for attackers.
OWASP API Security Top 10 (2023)
This module heavily references the latest OWASP API Security Top 10 (2023). The top threats include Broken Object Level Authorization (BOLA), Broken Authentication, Broken Object Property Level Authorization, and Unrestricted Resource Consumption.
The controls in this module will guide you through implementing authentication, rate limiting, strict input validation, and API gateway protections to secure your REST and GraphQL architectures.