OWASP API Security Top 10 Course – Secure Your Web Apps

Learn about the OWASP API Security Top 10, 2023 edition. In this crash course, you will learn about each security risk and learn techniques to fortify your APIs against potential threats. The course also covers key concepts that didn’t make it into the Top 10.

✏️ Course created by APIsec University and Corey Ball

⭐️ Contents ⭐️
Introduction
⌨️ (0:00:00) Welcome to APIsec University
⌨️ (0:01:46) Introduction to OWASP API Security and Beyond!
⌨️ (0:03:06) How the Course Works
⌨️ (0:05:16) Course Objectives

What is the OWASP API Security Top 10
⌨️ (0:06:38) What is OWASP
⌨️ (0:09:58) How is the Top 10 Compiled?
⌨️ (0:12:19) Mapped to External Sources
⌨️ (0:13:30) Updates to the OWASP API Security Top 10

The Top 10
⌨️ (0:19:38) API1:2023 - Broken Object Level Authorization
⌨️ (0:25:07) API2:2023 - Broken Authentication
⌨️ (0:32:23) API3:2023 - Broken Object Property Level Authorization
⌨️ (0:39:08) API4:2023 - Unrestricted Resource Consumption
⌨️ (0:42:54) API5:2023 - Broken Function Level Authorization
⌨️ (0:48:02) API6:2023 - Unrestricted Access to Sensitive Business Flows
⌨️ (0:51:48) API7:2023 - Server Side Request Forgery
⌨️ (0:56:49) API8:2023 - Security Misconfiguration
⌨️ (1:05:00) API9:2023 - Improper Inventory Management
⌨️ (1:11:22) API10:2023 - Unsafe Consumption of APIs

Beyond the Top 10
⌨️ (1:15:19) Injections
⌨️ (1:18:25) Insufficient Logging & Monitoring
⌨️ (1:20:38) Business Logic Flaws

🎉 Thanks to our Champion and Sponsor supporters:
👾 davthecoder
👾 jedi-or-sith
👾 南宮千影
👾 Agustín Kussrow
👾 Nattira Maneerat
👾 Heather Wcislo
👾 Serhiy Kalinets
👾 Justin Hual
👾 Otis Morgan
👾 Oscar Rahnama

--

[HackPrf]

feels like he's reading everything

[alexsiuwh]

it’s very hard to comprehend software security without a development background

[alfredorodriguez]

I was just going to buy a course on this.

[cyberianoid]

00:00:02 Believe it or not, I was reading exactly this page today while doing my Devops homework... ☝
What a coincidence 😆
---
Cybersecurity is not the computer sciense section I like.. this so boring for me

[truthseeker]

Can someone tell me what type of tutorials to watch and learn to be a data scientist?

[fitpflk]

Can we get a certificate when we complete the course in APIsec University ?

[tsv]

In Injection part speech doesn't match to slides

[samtx]

Devsecops ? Is this part of it code synk

[Glaxy_kit]

All he did was just reading some manual. Where is the actual humanly explanation?

[YezGotIt]

Visual and audio do not match at all - from 1:14:48 to 1:18:25, it is the same as from 1:18:46 to 1:20:38 with identical visuals, NOT COOL 👎

[ianwanjala]

why not go straight into what we want? No one wants to hear all that useless info