Static code analysis is insufficient in identifying the types of API logic flaws that lead to major API breach.
Discription
How to protect your APIs?
There are a number of ways you can protect your APIs from attacks:
1. Automated Security Testing: Automated security testing tools such as Brakeman and Code Climate can be used for automated static code scanning, which helps identify common vulnerabilities like SQL injection, cross-site scripting (XSS), and path traversal issues. However, these tools cannot detect more complex attack patterns or logic flaws unique to an applications specific use case
https://t.co/xUl8dW8KFh
References
Back to Main
