When building a REST API, are you or the quality assurance specialists on your team verifying that access policies are satisfied? For every single endpoint? Is it done every single time a new release of the API is made?
What about making sure no error stack trace ends up in 500 status responses in production? What about OPTIONS calls that reveal endpoints not declared in the OpenAPI schema? Did you also remember to check for SQL injection and XSS? What about all the other security properties you should know about and check for?
If you already have a comprehensive regression test suite that checks all this, I envy you. Is your employer hiring?
If not, open source fuzzers can generate test cases automatically — and no, with no LLM hallucinations. When doing so, they can also automatically check many of these properties and flag them if any errors are found.
In this talk, I will discuss examples of security issues and how they can be automatically detected using the open source fuzzer EvoMaster, showing the latest results in API security testing research.
High impact blog posts and eBooks on API business models, and tech advice
Connect with market leading platform creators at our events
Join a helpful community of API practitioners
Can't make it to the event? Signup to the Nordic APIs newsletter for quality content. High impact blog posts on API business models and tech advice.
By clicking below, you agree that we process your information per the terms in our Privacy Policy.
Become a part of our global community of API practitioners and enthusiasts. Share your insights on the blog, speak at an event or exhibit at our conferences and create new business relationships with decision makers and top influencers responsible for API solutions.
