OWASP API Security Top 10 - 2

In the previous room, we studied the first five principles of OWASP API Security. Now in this room, we will briefly discuss the remaining principles and their potential impact and mitigation measures.

• Identification of security misconfigurations
• Preventing Denial of Service (DoS) against the API
• Ensuring appropriate logging and monitoring

Learning Pre-requisites
An understanding of the following topics is recommended before starting the room:

• How websites work
• HTTP protocols & methods
• Principles of security
• OWASP top 10 web vulnerabilities

Connecting to the Machine
We will be using Windows as a development/test machine along with Talend API Tester - free edition throughout the room with the following credentials:

• Machine IP:  MACHINE_IP 
• Username:   Administrator
• Password:    Owasp@123

You can start the virtual machine by clicking the Start Machine button. The machine will start in a split-screen view. In case the VM is not visible, use the blue Show Split View button at the top-right of the page. Alternatively, you can connect with the VM through Remote Desktop using the above credentials. Please wait 1-2 minutes after the system boots completely to let the auto scripts run successfully that will execute Talend API Tester and Laravel-based web application automatically.

Let's begin!