Hands-On RESTful API Design Patterns and Best Practices
by Harihara Subramanian J, Anupama Murali, Pethuru Raj
Exposing sensitive data
The first and foremost essential security aspect of testing a REST API (or any application) is to evaluate and determine the categories of data and the need for data protection when they are in transit or in a persisted state. For instance, personal information, credit card information, health records, financial information, business information, and many other such categories of information need protection.
Moreover, data is fundamentally protected through encryption, as exposing sensitive data with no encryption could lead to an attacker stealing sensitive data, which would not just be limited to personal data, credit card numbers, identity theft, and so on.
There are many preventative measures and means of protection ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access