Learn about the OWASP API Security Project in this 40-minute conference talk from NolaCon 2016. Explore the importance of API security, common vulnerabilities, and best practices. Discover how attackers manipulate APIs, understand key security issues like improper data sanitization and insufficient access control, and gain insights into protecting sensitive data and proper key handling. Delve into security misconfigurations and learn how to contribute to improving API security.
Overview
Syllabus
Intro
What is OWASP?
Why is API Security Important?
People will try to manipulate APIs (for fun and profit)
Improper Data Sanitization
Insufficient Access Control
Insecure Direct Object Reference
Sensitive Data Exposure
Improper Key Handling
Security Misconfiguration
How You Can Help
