Skip to main content
CPEBuddy
API Security Fundamentals – Course for Beginners

API Security Fundamentals – Course for Beginners

Source: YouTube · freeCodeCamp.org · published Jan 30, 2025 · 1:48:57

Cybersecurity
No ratings yet Log in to rate
Transcript Available
Description

This course teaches API security fundamentals, covering why APIs are targeted, the OWASP API Security Top 10, and the Three Pillars of API Security approach to protection 0:00.

Key Takeaways:
• APIs power 83% of internet traffic but only 4% undergo security testing, creating a "Perfect API Storm" of vulnerabilities 5:37
• APIs are easily discoverable through browser inspection tools, making them accessible targets for attackers 8:50
• The OWASP API Security Top 10 includes critical threats like Broken Object Level Authorization (#1), which allowed unauthorized trading at Coinbase 18:25
• Broken Authentication (#2) led to the Duolingo breach exposing over 2 million user records through unsecured APIs 25:49
• The Three Pillars of API Security framework focuses on governance, testing, and monitoring to protect against these threats 2:17

This course provides practical knowledge for developers and security professionals to build and maintain secure APIs in today's threat landscape 0:15.

Sources:

  • 0:00 Introduction to API security course content
  • 5:37 API security statistics and the "Perfect API Storm"
  • 8:50 How attackers discover APIs
  • 18:25 OWASP #1 Broken Object Level Authorization with Coinbase example
  • 25:49 OWASP #2 Broken Authentication with Duolingo example
  • 2:17 Thr

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 2 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

Learn how to protect your APIs from modern security threats. In this course, you'll explore the OWASP API Security Top 10, analyze actual API breaches, and master the essential Three Pillars of API Security. Whether you're a developer or security professional, you'll gain practical knowledge to build and maintain secure APIs in today's threat landscape. Dan Barahona created this course. Hello freeCodeCamp
community and welcome to APIsec University
and this course on API security fundamentals. My name is Dan Barahona and
I'm one of the co founders of APIsec University. It's a site where we provide
dozens of free API security courses, webinars, and
conferences, and have over 100,000 students enrolled. In this course, you'll
learn all about why attackers are targeting
applications and exploit…