DEMO ENVIRONMENT FOR ANALYZING THE MOST COMMON WEAKNESSES OF APPLICATION PROGRAMMING INTERFACES (API)

Abstract

The non-profit organization OWASP regularly publishes a list of the ten most common application programming interface (API) weaknesses. The goal of this work is the development of a demo environment for the practical presentation of those weaknesses, that is, the presentation of optimal security measures to eliminate them. The demo environment consists of a weak and protected version of the API developed using the NodeJS framework. This paper presents the first five weaknesses and describes the optimal security measures for solving them.