Staveley API Security for White Hat Hackers

Uncover offensive defense strategies and get up to speed with secure API implementation
1. Auflage 2024
ISBN: 978-1-80056-935-5
Verlag: De Gruyter
Format: EPUB
Kopierschutz: 0 - No protection

E-Book, Englisch, 418 Seiten

APIs have evolved into an essential part of modern applications, making them an attractive target for cybercriminals. Written by a multi-award-winning cybersecurity leader , this comprehensive guide offers practical insights into testing APIs, identifying vulnerabilities, and fixing them.
With a focus on hands-on learning, this book guides you through securing your APIs in a step-by-step manner. You'll learn how to bypass authentication controls, circumvent authorization controls, and identify vulnerabilities in APIs using open-source and commercial tools. Moreover, you'll gain the skills you need to write comprehensive vulnerability reports and recommend and implement effective mitigation strategies to address the identified vulnerabilities. This book isn't just about hacking APIs; it's also about understanding how to defend them. You'll explore various API security management strategies and understand how to use them to safeguard APIs against emerging threats.
By the end of this book, you'll have a profound understanding of API security and how to defend against the latest threats. Whether you're a developer, security professional, or ethical hacker, this book will ensure that your APIs are secure and your organization's data is protected.

Autoren/Hrsg.

Staveley, Confidence

Weitere Mitwirkende

Romeo, Christopher

Fachgebiete

• Mathematik | Informatik EDV | Informatik Computerkommunikation & -vernetzung Netzwerksicherheit
• Mathematik | Informatik EDV | Informatik Technische Informatik Computersicherheit Datensicherheit, Datenschutz
• Mathematik | Informatik EDV | Informatik Programmierung | Softwareentwicklung Web Services

Inhaltsverzeichnis

Table of Contents - Introduction to API Architecture and Security
- The Evolving API Threat Landscape and Security Considerations

- OWASP API Security Top 10 Explained

- API Attack Strategies and Tactics
- Exploiting API Vulnerabilities
- Bypassing API Authentication and Authorization Controls

- Attacking API Input Validation and Encryption Techniques

- API Vulnerability Assessment and Penetration Testing
- Advanced API Testing: Approaches, Tools, and Frameworks
- Using Evasion Techniques
- Best Practices for Secure API Design and Implementation
- Challenges and Considerations for API Security in Large Enterprises
- Implementing Effective API Governance and Risk Management Initiatives

Über Autor(innen)

Staveley Confidence :

Confidence Staveley is a multi-award-winning cybersecurity leader with a background in software engineering, specializing in application security and cybersecurity strategy. Confidence excels in translating cybersecurity concepts into digestible insights for diverse audiences. Her YouTube series, “API Kitchen,” explains API security using culinary metaphors. Confidence holds an advanced diploma in software engineering, a bachelor's degree in IT and business information systems, and a master's degree in IT management from the University of Bradford, as well as numerous industry certifications such as CISSP, CSSLP, and CCISO. In addition to her advisory roles on many boards, Confidence is the founder of CyberSafe Foundation and MerkleFence.