API Security for Beginners - A Real Test of Today's Apps

Every tap in a mobile app talks to an API — and API mistakes are behind many of today's biggest data leaks. This book teaches API security from absolute zero, the honest and legal way.

The journey is built in five parts: what APIs are and how the web talks · keys, tokens and how an API decides who you are · the classic API bug families, each with a safe, fictional lab example · the professional method — map, explore, test, report · and finally, how safe APIs are designed.

Inside you will learn:

• How apps and servers exchange data behind the screen

• Keys, tokens, sessions and authorisation, explained from scratch

• The classic API weaknesses — and the missing check behind each one

• How to practise only on systems you own or are invited to test

• How professionals document and report what they find

For students, beginner testers and developers who want to stop making the classic API mistakes.

PDF ebook · 388 pages · English · Secure The Future Series