API Security: REST and GraphQL Protection

APIs are increasingly targeted attack vectors.

Common API Vulnerabilities

- Broken authentication
- Excessive data exposure
- Lack of rate limiting
- Mass assignment
- Injection attacks

Security Controls

- OAuth 2.0 / JWT tokens
- API gateway
- Input validation
- Rate limiting
- Schema validation

Tools

- OWASP ZAP
- Burp Suite
- Postman security tests
- 42Crunch
- Salt Security