API Security Guideline for Developers and Product Owners

Date

2025-1-10

Author

Akgündüz, Okan

Metadata

Show full item record

This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

Item Usage Stats

1278
views

234
downloads

Cite This

This report provides a survey for security topics, practices, and recommendations to consider when designing, developing, and maintaining an API service. It is primarily intended for developers, product owners, and other stakeholders involved in API development. Additionally, it is relevant to those who consume API services. The report draws from widely recognized security standards, guidelines, and surveys. It is created by examining the most common API security vulnerabilities identified in existing studies. Its scope of work is then expanded to include potential vulnerabilities that can arise during an API service’s development process/lifecycle. For each identified vulnerability/risk/issue, the report outlines recommended mitigations based on standards and guidelines. The result is a categorized list that can be used as an API Security Guideline.

Subject Keywords

Cyber Security, API Security, API Security Guideline, API Security Best Practices, API Protection , Secure API Development, API Hardening , Secure API Design, API Security for Developers

URI

https://hdl.handle.net/11511/113010

Collections

Graduate School of Informatics, Term Project