Advanced API Security

This book will prepare you to meet the next wave of challenges in enterprise security, guiding you through and sharing best practices for designing APIs for rock-solid security. Advanced API Security, Second Edition explains in depth how to secure APIs from traditional HTTP Basic Authentication to OAuth 2.0 and the standards built around it. It will explore different security standards and protocols, helping you choose the right option for your needs.

Build APIs with rock-solid security. Keep your business thriving while keeping enemies away. The book takes you through the best practices in designing APIs for rock-solid security, provides an in depth understanding of most widely adopted security standards for API security and teaches you how to compare and contrast different security standards/protocols to find out what suits your business needs, the best.§§ This new edition enhances all the topics discussed in its predecessor with the latest up to date information, and provides more focus on beginners to REST, JSON, Microservices and API security.

Additionally, it covers how to secure APIs for the Internet of Things (IoT). § Audience: §The Advanced API Security 2nd Edition is for Enterprise Security Architects and Developers who are designing, building and managing APIs. The book will provide guidelines, best practices in designing APIs and threat mitigation techniques for Enterprise Security Architects while developers would be able to gain hands-on experience by developing API clients against Facebook, Twitter, Salesforce and many other cloud service providers.§ What you'll learn § - Build APIs with rock-solid security by understanding best practices and design guidelines.

- Compare and contrast different security standards/protocols to find out what suits your busine ss needs, the best.- Expand business APIs to partners and outsiders with Identity Federation. - Get hands-on experience in developing clients against Facebook, Twitter, and Salesforce APIs. - Understand and learn how to secure Internet of Things.§