INTERFACE by apidays 2023 - Exploratory Testing of API Security - a Guide, Bas Dijkstra, On Test Automation

INTERFACE by apidays 2023
APIs for a “Smart” economy. Embedding AI to deliver Smart APIs and turn into an exponential organization
June 28 & 29, 2023

Exploratory Testing of API Security - a Guide
Bas Dijkstra, Test automation trainer, Consultant, and Developer at On Test Automation

------

Check out our conferences at https://www.apidays.global/

Do you want to sponsor or talk at one of our conferences?
https://apidays.typeform.com/to/ILJeAaV8

Learn more on APIscene, the global media made by the community for the community:
https://www.apiscene.io

Explore the API ecosystem with the API Landscape:
https://apilandscape.apiscene.io/

Transcript

1. Bas Dijkstra bas@ontestautomation.com www.ontestautomation.com Exploratory testing of API security – a guide
3. Many testers believe security testing is ‘difficult’ and should be left to ‘the experts’
4. What is exploratory testing?
5. Let’s explore the API specs first
6. What is NOT in the specifications?
7. The OWASP API security top 10 https://owasp.org/API-Security/editions/2023/en/0x11-t10/
8. #2 – Broken Authentication
9. #5 – Broken Function Level Authorization
10. #1 – Broken Object Level Authorization
11. These are just three examples
12. I’ve not even talked about…
13. With a bit of curiosity, common sense and some guidance, everybody can perform API security testing
15. Contact _Email: bas@ontestautomation.com _Website: www.ontestautomation.com _LinkedIn: /in/basdijkstra