Interview_Tips
Summary of Cyber Security interview questions I have been through, hope this helps (by jigerjain)
API-Security
OWASP API Security Project (by OWASP)
Our great sponsors
Interview_Tips | API-Security | |
---|---|---|
1 | 15 | |
62 | 1,933 | |
- | 1.8% | |
10.0 | 6.2 | |
about 4 years ago | 12 days ago | |
Dockerfile | ||
- | GNU General Public License v3.0 or later |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Interview_Tips
Posts with mentions or reviews of Interview_Tips.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2021-11-29.
API-Security
Posts with mentions or reviews of API-Security.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-05-14.
-
What's the problem with my API?
Check the top 10 API security by OWASP
-
Quick Privacy Question
In the end this is a security oversight known as excessive data exposure (OWASP - API3:2019) of Riot and as long as they keep sending this info people will be able to see it.
-
Implementing decent security
Check out ----, https://github.com/OWASP/API-Security
-
API without authentication severity?
If incorrect API authentication mechanisms implementation considered as Broken User Authentication, how severe the one without authentication at all? Critical? or high?
-
Feedbak for an article on API Security Maturity Model+
The OWASP top 10 API security risks are posted on their GitHub here. As OWASP shows, because APIs are open to the network:
-
API10:2019 - Insufficient Logging & Monitoring
More cases and prevention methods can be found on the OWASP API Security Top 10 official repository
- API9:2019 - Improper Assets Management
- API8:2019 - Injection
-
API7:2019 - Security Misconfiguration
OWASP API-Security repo
- API6:2019 - Mass Assignment
What are some alternatives?
When comparing Interview_Tips and API-Security you can also consider the following projects:
Application-Security-Engineer-Interview-Questions - Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer
API-Security-Checklist - Checklist of the most important security countermeasures when designing, testing, and releasing your API