Finance Certifications Goldman Sachs and Amazon Teams Trust
AI Engineer - Learn how to integrate AI into software applications
Overview
Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This talk uses real-world cases to explain common API vulnerabilities, especially authorization problems, sensitive data exposure, mass assignment, token handling, and inadequate testing. It provides practical guidelines for assessing and improving API security, including API contracts, auditability, and compartmentalization.
Syllabus
Intro
The cowboy years are over
Enforce sensible limits
The client is irrelevant
Client controls are useless
Sensitive Data Exposure
Mass Assignment
Test Your API
API Firewalls
Rest API
Implement Function Level Authorization
Auditability
Cookies
Tokens
Understand your requirements
Follow Jot Security
What happens when API goes wrong
Outro
Taught by
NDC Conferences