From the course: The OWASP API 2023 Top 10: An Overview

Unlock the full course today

Join today to access over 24,700 courses taught by industry experts.

API8:2023 Security Misconfigurations

API8:2023 Security Misconfigurations

From the course: The OWASP API 2023 Top 10: An Overview

Start my 1-month free trial Buy for my team

API8:2023 Security Misconfigurations

“

- [Instructor] The eighth entry on the OWASP API top 10 is security misconfiguration. According to OWASP, APIs and the system supporting them typically contain complex configurations, meant to make APIs more customizable. Software and DevOps engineers can miss these configurations or don't follow best security practices when it comes to configuration, opening the door for different types of attacks. Security misconfiguration happens when security controls permissions, authentication mechanisms, and other important settings are not set up correctly. It can be a simple oversight or a lack of attention to detail. Think of APIs and applications just like cars. Just like a vehicle has several parts that work together to function and require routine maintenance, APIs have several lines of source code dependencies, security headers, and more that require regular updates and testing. If left unchecked for too long, APIs and…

Contents