Advanced API Security: OAuth 2.0 and Beyond

© Prabath Siriwardena 2020

P. SiriwardenaAdvanced API Securityhttps://doi.org/10.1007/978-1-4842-2050-4_2

2. Designing Security for APIs

Prabath Siriwardena¹ 

(1)

San Jose, CA, USA

 

Just a few days after everyone celebrated Thanksgiving Day in 2013, someone who fooled the Target defense system installed a malware in its security and payment system. It was the peak time in business for any retailer in the United States. While the customers were busy in getting ready for Christmas, the malware which was sitting in the Target payment system silently captured all the credit card information from the cashier’s terminal and stored them in a server, which was under the control of the attacker. Forty million credit card numbers were stolen in this way from ...