OWASP API Security Top 10 Course – Secure Your Web Apps
By freeCodeCamp.org
Published: Aug 30, 2023
Learn about the OWASP API Security Top 10, 2023 edition. In this crash course, you will learn about each security risk and learn techniques to fortify your APIs against potential threats. The course also covers key concepts that didn’t make it into the Top 10.âœï¸ Course created by APIsec University and Corey Ball
Website: https://www.apisecuniversity.com
YouTube: https://www.youtube.com/@apisecu
Twitter: https://twitter.com/apisecu
LinkedIn: https://www.linkedin.com/company/apisec-universityâï¸ Contents âï¸
Introduction
âŒ¨ï¸ (0:00:00) Welcome to APIsec University
âŒ¨ï¸ (0:01:46) Introduction to OWASP API Security and Beyond!
âŒ¨ï¸ (0:03:06) How the Course Works
âŒ¨ï¸ (0:05:16) Course ObjectivesWhat is the OWASP API Security Top 10
âŒ¨ï¸ (0:06:38) What is OWASP
âŒ¨ï¸ (0:09:58) How is the Top 10 Compiled?
âŒ¨ï¸ (0:12:19) Mapped to External Sources
âŒ¨ï¸ (0:13:30) Updates to the OWASP API Security Top 10The Top 10
âŒ¨ï¸ (0:19:38) API1:2023 – Broken Object Level Authorization
âŒ¨ï¸ (0:25:07) API2:2023 – Broken Authentication
âŒ¨ï¸ (0:32:23) API3:2023 – Broken Object Property Level Authorization
âŒ¨ï¸ (0:39:08) API4:2023 – Unrestricted Resource Consumption
âŒ¨ï¸ (0:42:54) API5:2023 – Broken Function Level Authorization
âŒ¨ï¸ (0:48:02) API6:2023 – Unrestricted Access to Sensitive Business Flows
âŒ¨ï¸ (0:51:48) API7:2023 – Server Side Request Forgery
âŒ¨ï¸ (0:56:49) API8:2023 – Security Misconfiguration
âŒ¨ï¸ (1:05:00) API9:2023 – Improper Inventory Management
âŒ¨ï¸ (1:11:22) API10:2023 – Unsafe Consumption of APIsBeyond the Top 10
âŒ¨ï¸ (1:15:19) Injections
âŒ¨ï¸ (1:18:25) Insufficient Logging & Monitoring
âŒ¨ï¸ (1:20:38) Business Logic Flaws🎉 Thanks to our Champion and Sponsor supporters:
👾 davthecoder
👾 jedi-or-sith
👾 å—å®®åƒå½±
👾 Agustín Kussrow
👾 Nattira Maneerat
👾 Heather Wcislo
👾 Serhiy Kalinets
👾 Justin Hual
👾 Otis Morgan
👾 Oscar Rahnama—
Learn to code for free and get a developer job: https://www.freecodecamp.org
Read hundreds of articles on programming: https://freecodecamp.org/news