Expert explains secure APIs approach, cyber safety in new book

A new book has offered leeway in securing Application Programming Interface (APIs) and protection of organisation’s data against hackers.

The book, titled: ‘API Security for White Hat Hackers,’ authoured by cybersecurity expert, Confidence Staveley, offered a hands-on approach to learning, emphasising practical exercises that guide readers through testing APIs, identifying vulnerabilities, and implementing fixes.

With the book focusing on real-world scenarios, users can gain invaluable experience bypassing authentication controls, circumventing authorisation mechanisms, and identifying common vulnerabilities using open-source and commercial tools.

The book explained that API is the backbone of the modern application, whether the user is using the web or mobile or happens to be a sentient Al service.

Further, it revealed that cybercriminals are increasingly targeting APIs, recognising their pivotal role in applications’ data flow and functionality and the gateway that they’ve become to a treasure trove of organisational data.

The book can equip developers, security professionals, or ethical hackers to help secure their APIs and protect organisation’s data.

In the book, the Chief Executive Officer of Devici and General Partner at Kerr Ventures, Christopher Romeo, who said Staveley is the best voice to bring this information to the world, stressed that everyone needs her perspective on the impact of API and how it can potentially negatively impact the security and privacy of data.
Romeo said API Security for White Hat Hackers is more than just a title, but a deep dive into API security.

“This book offers a hands-on approach to learning, emphasizing practical exercises that guide readers through testing APIs, identifying vulnerabilities, and implementing fixes. By focusing on real-world scenarios, readers gain invaluable experience in bypassing authentication controls, circumventing authorization mechanisms, and identifying common vulnerabilities using open-source and commercial tools,” he stated.

On her part, Staveley explained that APIs are connecting our world and they are basically why different applications can talk to each other.

She said this means that different organisations can collaborate because APIs exist, adding that because they are connectors, they are usually a good point for attackers to get into organisations, steal data and cause all sorts of damage.

“For me, I wanted to make sure that I share my knowledge in a way that strengthens businesses and organisations to be able to protect our data and that is why I wrote this book.

“A lot of the things that are written in the book are from my own experience being in the industry for over 10 years now. Some of them are also from standards and best practices across the world. I have also created an intentionally vulnerable API. This book is hands-on. You can use that API and learn how to defend your APIs by learning how to attach them.