February 2024
Intermediate to advanced
384 pages
9h 44m
English
Overview
Defending APIs delves into the critical aspects of API security, teaching you both offensive and defensive techniques to safeguard your APIs. You will learn about vulnerabilities, protection strategies, and practical solutions to design secure APIs. Whether you are an API developer or security professional, this book will empower you with the expertise to combat real-world threats.
What this Book will help me do
- Understand the core elements of API security and their development lifecycle.
- Analyze high-profile API security breaches to learn practical lessons.
- Master offensive techniques used by attackers for thorough security testing.
- Implement 'shift-left' and 'shield-right' approaches for full security coverage.
- Learn defensive strategies tied to common frameworks like .NET, Python, and Java.
Author(s)
Colin Domoney, the author of Defending APIs, is a seasoned expert in API and DevSecOps security. With extensive industry experience, he brings practical insights and real-world examples to his writing. Colin is passionate about secure software development and educating professionals about API vulnerabilities and protection.
Who is it for?
This book is aimed at application security engineers and professionals looking to strengthen their API defenses, as well as penetration testers seeking insights into exploiting API vulnerabilities. It caters to API developers aiming to understand and mitigate potential risks. A basic understanding of APIs and application security is recommended for readers.
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.