What did we learn?
That's a wrap for now; but don't lose your passion for learning every day.
What we learned
We've brought you safely through the API Cybersecurity Course.
A quick recap of the places we visited and practiced:
- API Architectures: REST, GraphQL and gRPC
- OWASP API Security Top 10
- API-specific attack surface
- Resource-level access control and authorization
- Common authorization errors in APIs (BOLA, BFLA)
- Authentication mechanisms: API Keys, OAuth 2.0, JWT
- Encryption and data protection in API communications
- Excessive data exposure and field overexposure
- Input validation and secure data handling
- Rate limiting and abuse protection
- Monitoring and detecting anomalous behavior in APIs
- Using API gateways to enforce security controls
- Versioning and secure deprecation of APIs
- API inventory and discovery (Shadow APIs)
- Continuous security testing for APIs
Support us
Learn the ways to support the projects at no cost: Together we are more
Thank you so much for joining us on this journey 🤘🏽