Bas Dijkstra - Are you sure your APIs are secure? An introduction to API security testing - May 2025

Описание: Speaker: Bas Dijkstra

Topic: Are you sure your APIs are secure? An introduction to API security testing

APIs are responsible for more than 80% of all internet traffic. Therefore, it shouldn’t be surprising that people with malicious intent are trying to gain unlawful access to systems and data through APIs more and more often.

As a result, it’s important that we, as testers and developers, are aware of the security of the APIs that are used in our systems. But where do you get started with testing the security of your APIs? And isn’t that really complex?

In this talk and live testing demo, we will use the 2023 OWASP API security top 10 to learn more about some of the most common API security vulnerabilities. You’ll see that, even without specialized tools and deep security testing knowledge, you can uncover valuable information about the security of your APIs and get better insights into whether your data and your systems are safe and secure.

After this talk, you will have seen that common sense and a healthy dose of curiosity go a long way to get started with API security testing.

Key Takeaways:

With common API testing tools, a healthy dose of curiosity and some guidelines, every tester can uncover valuable information about the security of their APIs
The rise in use of APIs and the simplified attack vector they introduce means there’s a need for adequate API security testing
Getting started with API security testing does not have to be hard, complex, technical or ‘something only security experts can do’
Bio:

Hey, my name is Bas Dijkstra, and I am an independent test automation consultant and trainer.

I have been active in the test automation field for some 18 years now, and have worked on software testing and automation solutions across a wide range of programming languages, frameworks and technology stacks.

I’ve delivered test automation training to dozens of companies and hundreds of conference attendees in the Netherlands as well as abroad, to excellent reviews.

I’m also the developer of RestAssured.Net, a library that is meant to make writing tests for HTTP APIs in C# a breeze.

I live in Amersfoort, The Netherlands, together with my wife and two sons. When I am not at work, I like to go outside for a long bike ride, or to sit down and play a game of chess or read a good book.