API Security Top 10 Vulnerabilities

As software crafters, our responsibility spans more than just shipping working, maintainable software and automated tests. The applications we build must be secured, observable, and reliable. Tools can assist us up to a point, but from there on it's up to the design decisions we take to avoid common pitfalls as early as possible in the development cycle.

In this presentation, we will walk over the top 10 most common security vulnerabilities when developing REST APIs, similar to the classic OWASP Top 10 that many of you might be familiar with.

Vulnerabilities we'll discuss:
- Broken Object Level Authorization
- Broken User Authentication
- Excessive Data Exposure
- Lack of Resources & Rate Limiting
- Broken Function Level Authorization
- Mass Assignment
- Security Misconfiguration
- Injection
- Improper Assets Management
- Insufficient Logging & Monitoring

Let's hack our way to better software engineers together!

👩🏻‍💻👨‍💻

About the speaker:

[kennystephen]

Thank you, I found this video very interesting and your presentation is just unique.

[sharifyy]

When using uuid, considering an extra id(uuid) in database is better or just use the uuid as primary key?