API Security with the OWASP API Security Top 10

سرفصل های دوره

This course will teach you about unique vulnerabilities faced by web-based APIs and the defenses you’ll need to protect them.

1. Course Overview

1. Course Overview

2. Understanding the OWASP API Security Top 10

1. Using the OWASP API Security Top 10

2. Metrics behind the Top 10 Risks

3. Broken Object Level Authorization

1. Understanding Broken Object Level Authorization

2. Object Level Attacks

3. Demo - Broken Object Level Attacks

4. Examining Defenses

4. Broken Authentication

1. Understanding Broken Authentication

2. Password Based Attacks and Defenses

3. Other Attacks and Defenses

4. Demo - Common JWT Attacks

5. Broken Object Property Level Authorization

1. Understanding Broken Object Property Level Authorization

2. Object Property Attacks and Defenses

3. Demo - Exploiting Object Properties

6. Unrestricted Resource Consumption

1. Unrestricted Resource Consumption Attacks

2. Defenses for Resource Consumption

7. Broken Function Level Authorization

1. Attacking Broken Function Level Authorization

2. Demo - Exploiting Broken Function Level Authorization

3. Defenses

8. Unrestricted Access to Sensitive Business Flows

1. Sensitive Business Flows and Potential Attacks

2. Demo - Attacking an Unrestricted Business Flow

3. Business Flow Defenses

9. Server-side Request Forgery

1. Understanding Server-side Request Forgery

2. Demo - Forging Requests from the Server

3. SSRF Defenses

10. Security Misconfiguration

1. Misconfiguration and Patching

2. HTTP Request Chain Misconfigurations

3. Server Environment Misconfigurations

4. Misconfiguration in the API and Response Chain

11. Improper Inventory Management

1. Understanding Improper Inventory Management

2. Demo - Deprecated Functionality

3. Attacks and Defenses

12. Unsafe Consumption of APIs

1. Understanding Unsafe Consumption of APIs

2. API Consumption Attacks

3. API Consumption Defenses

189,000 تومان

افزودن به سبد خرید

خرید دانلودی فوری

در این روش نیاز به افزودن محصول به سبد خرید و تکمیل اطلاعات نیست و شما پس از وارد کردن ایمیل خود و طی کردن مراحل پرداخت لینک های دریافت محصولات را در ایمیل خود دریافت خواهید کرد.

تولید کننده: PluralSight