A master thesis from Aalborg University
CLOUD API SECURITY AUDIT: An Extensive Approach to API Assessment
Author(s)
Term
4. semester
Education
Publication year
2023
Submitted on
2023-06-02
Pages
51 pages
Abstract
The migration of computing services to the cloud and the use of APIs to communicate and interact with several applications over the internet come with its challenges. As these challenges increase by the day, it is very important that attention is paid to auditing the use of APIs, especially in enterprises. This project presents an extensive approach to assessing RESTful APIs. It commences by touching on why this is essential, discussing vulnerabilities to APIs, and outlining security requirements for APIs. A review of current API security audit frameworks and approaches to auditing is highlighted. Next, an extensive approach to assessing Cloud APIs is proposed using the presented security requirements as metrics. Finally, the results of an assessment of a Public API are discussed.
The migration of computing services to the cloud and the use of APIs to communicate and interact with several applications over the internet come with its challenges. As these challenges increase by the day, it is very important that attention is paid to auditing the use of APIs, especially in enterprises. This project presents an extensive approach to assessing RESTful APIs. It commences by touching on why this is essential, discussing vulnerabilities to APIs, and outlining security requirements for APIs. A review of current API security audit frameworks and approaches to auditing is highlighted. Next, an extensive approach to assessing Cloud APIs is proposed using the presented security requirements as metrics. Finally, the results of an assessment of a Public API are discussed.
Keywords
Documents
Colophon: This page is part of the AAU Student Projects portal, which is run by Aalborg University. Here, you can find and download publicly available bachelor's theses and master's projects from across the university dating from 2008 onwards. Student projects from before 2008 are available in printed form at Aalborg University Library.
If you have any questions about AAU Student Projects or the research registration, dissemination and analysis at Aalborg University, please feel free to contact the VBN team. You can also find more information in the AAU Student Projects FAQs.