rest api security
play

REST API Security Jamie Wallace EBSCO LearningExpress Physics 25 - PowerPoint PPT Presentation

Mar 15, 2023 •331 likes •908 views

REST API Security Jamie Wallace EBSCO LearningExpress Physics 25 Years in Software Director of Software Development What is REST? Security? Solutions Implementation What is REST? Security? Solutions Implementation What is REST?

  1. REST API Security Jamie Wallace EBSCO LearningExpress

  2. Physics 25 Years in Software Director of Software Development

  3. What is REST? Security? Solutions Implementation

  4. What is REST? Security? Solutions Implementation

  5. What is REST? Security? Solutions Implementation

  6. What is REST? Security? Solutions Implementation

  7. REST

  8. RE presentational S tate T ransfer

  9. CRUD HTTP verbs using

  10. most web services only use an API key

  11. Request Request Request Validator API Key

  12. Request Validator API Key

  13. Validator API Request Key

  14. Validator API Request

  15. Client Server Side Side

  16. Authorized client Valid and unmodified request No replay attacks All users

  17. Authorized client Valid and unmodified request No replay attacks All users

  18. Authorized client Valid and unmodified request No replay attacks All users

  19. Authorized client Valid and unmodified request No replay attacks All users

  20. Domain Cookie Solution Time based One Time Password JSON Web Token

  21. SessionID Header Validator API Request SessionID Cookie

  22. SessionID Header Request Validator API SessionID Cookie

  23. SessionID Header Validator API Request SessionID Cookie

  24. Validator API Request

  25. Single Multiple Domain Domain

  26. SessionID Header Validator API Request SessionID Cookie

  27. Domain Cookie Solution Time based One Time Password JSON Web Token

  28. Time Periods HMAC Key

  29. Time Periods HMAC Key TOTP

  30. HMAC Key Ç TOTP

  31. Request Validator API TOTP

  32. Request Validator API TOTP

  33. Validator API Request TOTP

  34. Validator API Request

  35. Domain Cookie Solution Time based One Time Password JSON Web Token

  36. Header Payload HMAC Key

  37. Signature Payload Header Signature HMAC Key

  38. Signature Payload Header HMAC Key

  39. Request Validator API JWT

  40. Request Validator API JWT

  41. Validator API Request JWT

  42. Validator API Request

  43. Application Fingerprint

  44. JWT with Signature Service

  45. TS TS Key String 10 115ABC 20 115DEF 30 115GHI HMAC

  46. TS TS Key 10 115ABC 20 115DEF 30 String 115GHI HMAC

  47. TS TS Key 10 115ABC 20 115DEF 30 String 115GHI HMAC Hash

  48. Encrypting JWT with Encryption Service

  49. TS TS Key String 10 115ABC 20 115DEF 30 115GHI HMAC

  50. TS TS Key 10 115ABC 20 115DEF 30 String 115GHI HMAC

  51. TS TS Key 10 115ABC 20 115DEF 30 Encrypted String 115GHI HMAC or Decrypted String

  52. Client Manager Validator Encryption Service Signature Service Key Store

  53. Client Manager Validator Encryption Service Signature Service Key Store

  54. Client Manager Validator Encryption Service Signature Service Key Store

  55. Client Manager Validator Encryption Service Signature Service Key Store

  56. Client Manager Validator Encryption Service Signature Service Key Store

  57. Q & A

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

Outline What is ReST ? Constraints in ReST REST Architecture Components Features of

Outline What is ReST ? Constraints in ReST REST Architecture Components Features of

Outline What is ReST ? Constraints in ReST REST Architecture Components Features of ReST applications Example of requests in REST & SOAP Complex REST request REST Server response Real REST examples REST Design

603 views • 34 slides
RESTful Web Services Stefan Marr Agenda What is REST? The Bookmark Example Principles of REST

RESTful Web Services Stefan Marr Agenda What is REST? The Bookmark Example Principles of REST

RESTful Web Services Stefan Marr Agenda What is REST? The Bookmark Example Principles of REST Web Service Design Semantic of HTTP/1.1 Operations SOAP vs. REST Style Assets and Drawbacks Security Public Web Services HPI, Seminar Advanced

330 views • 10 slides
REST API What it means to be RESTful What is REST REST stands for REpresentational State

REST API What it means to be RESTful What is REST REST stands for REpresentational State

REST API What it means to be RESTful What is REST REST stands for REpresentational State Transfer It is neither a standard nor a protocol REST is not HTTP , although because of HTTPs prevalence and popularity the two tend to go

708 views • 11 slides
Introduction to REST Web REST Web Services Characteristics Services Principle of REST Web

Introduction to REST Web REST Web Services Characteristics Services Principle of REST Web

Introduction to REST Web Services 2/14/2009 Agenda What is REST? Introduction to REST Web REST Web Services Characteristics Services Principle of REST Web Services Design Semantic of HTTP/1.1 Operations Asst. Prof. Dr. Kanda

522 views • 12 slides
SSC REST API Jonathan Couch Fortify Security Support Engineer How to create a project version

SSC REST API Jonathan Couch Fortify Security Support Engineer How to create a project version

SSC REST API Jonathan Couch Fortify Security Support Engineer How to create a project version Creating a project is not one REST API endpoint call but uses two separate calls using the following endpoints /projectVersions /bulk To

370 views • 17 slides
Preparing a REST API Rules of REST APIs, API patterns, Typical CRUD operations Rules for a REST

Preparing a REST API Rules of REST APIs, API patterns, Typical CRUD operations Rules for a REST

Preparing a REST API Rules of REST APIs, API patterns, Typical CRUD operations Rules for a REST API Recall : REST Representational State Transfer o REST is statelessit has no idea of any current user state or history o API

535 views • 17 slides
Rest for the Restless (or Finding Rest in a Family Tree) Matthew 1:1-17 3 Promises of Rest for

Rest for the Restless (or Finding Rest in a Family Tree) Matthew 1:1-17 3 Promises of Rest for

Overview [not in slides] Rest for the Restless (or Finding Rest in a Family Tree) Matthew 1:1-17 3 Promises of Rest for the Restless 1. God promises rest in his righteousness 2. God promises rest in his presence 3. God promises rest in his

92 views • 5 slides
presentation kit leave the rest to us SM leave the rest to us SM centrally located leave the

presentation kit leave the rest to us SM leave the rest to us SM centrally located leave the

presentation kit leave the rest to us SM leave the rest to us SM centrally located leave the rest to us SM easy access to any places leave the rest to us SM exterior leave the rest to us SM lobby leave the rest to us SM lobby lounge

521 views • 18 slides
Security Evaluation on Amazon Web Services REST API Authentication Protocol Signature Version

Security Evaluation on Amazon Web Services REST API Authentication Protocol Signature Version

Security Evaluation on Amazon Web Services REST API Authentication Protocol Signature Version 4 Khanh Hoang Huynh Jason Kerssens Supervisors: Alex Stavroulakis (KPMG) Aristide Bouix (KPMG) Introduction AWS As of 2018, AWS has a

636 views • 26 slides
Developers Nicole Schmidt and Rob Kraft Agenda Lucity REST API introduction Lucity REST

Developers Nicole Schmidt and Rob Kraft Agenda Lucity REST API introduction Lucity REST

Lucity for Application Developers Nicole Schmidt and Rob Kraft Agenda Lucity REST API introduction Lucity REST API Recent Changes REST Client Applications Explained Web Hooks Other Options Future Plans Lucity REST API

498 views • 22 slides
Topics RPC vs. REST: What's the What makes an API truly REST best practices difference

Topics RPC vs. REST: What's the What makes an API truly REST best practices difference

Topics RPC vs. REST: What's the What makes an API truly REST best practices difference and why does it RESTful? (Constraints and (common problems and matter? interface) their solutions) Planning and developing Drupal services

632 views • 28 slides
Writing REST APIs with OpenAPI and Swagger Ada Stphane Carrez FOSDEM 2018 OpenAPI and Swagger

Writing REST APIs with OpenAPI and Swagger Ada Stphane Carrez FOSDEM 2018 OpenAPI and Swagger

Writing REST APIs with OpenAPI and Swagger Ada Stphane Carrez FOSDEM 2018 OpenAPI and Swagger Ada Introduction to OpenAPI and Swagger Writing a REST Ada client Writing a REST Ada server Handling security with OAuth2 Demo

970 views • 37 slides
Security and Privacy 12A. Operating Systems Security Operating Systems Principles 12B.

Security and Privacy 12A. Operating Systems Security Operating Systems Principles 12B.

5/18/2016 Security and Privacy 12A. Operating Systems Security Operating Systems Principles 12B. Authentication 12C. Authorization Security and Privacy 12D. Trust 12E. At-Rest Encryption Mark Kampe (markk@cs.ucla.edu) Security and Privacy

116 views • 8 slides
Copyleft for the Rest of Us Linuxwochen Linz 2016 About me DevOps Engineer Security

Copyleft for the Rest of Us Linuxwochen Linz 2016 About me DevOps Engineer Security

Copyleft for the Rest of Us Linuxwochen Linz 2016 About me DevOps Engineer Security Engineer FLOSS Enthusiast FSFE Group Linz coordinator since 2013 FSFE Austrian team (only recently) 28.04.2016 Linuxwochen Wien Outline

728 views • 37 slides
REST Web-based APIs REST Representational State Transfer Style of web software

REST Web-based APIs REST Representational State Transfer Style of web software

REST Web-based APIs REST Representational State Transfer Style of web software architecture that simplifies application Not a standard, but a design pattern REST Take all resources for web application (data, files, functions)

722 views • 22 slides
Continuations continued: the REST of the computation Anton van Straaten appsolutions.com 1

Continuations continued: the REST of the computation Anton van Straaten appsolutions.com 1

Continuations continued: the REST of the computation Anton van Straaten appsolutions.com 1 REST - The 10-second overview "the name given to the architecture of the World Wide Web by Roy Fielding." -- rest-discuss Following REST

789 views • 59 slides
THANKS Greg Liz Pam Policy Geeks IAF Non-profit Charitable purpose is

THANKS Greg Liz Pam Policy Geeks IAF Non-profit Charitable purpose is

DATA, ETHICS, AND SUCCESS BY DESIGN THANKS Greg Liz Pam Policy Geeks IAF Non-profit Charitable purpose is research and education Global in scope 60 years experience in information policy BIG BANG Acceleration

469 views • 17 slides
Welcome To The ResQIPS Research Symposium Keynote Discussion - Translating Health Policy Into

Welcome To The ResQIPS Research Symposium Keynote Discussion - Translating Health Policy Into

Welcome To The ResQIPS Research Symposium Keynote Discussion - Translating Health Policy Into Research Featuring Senator Heather Carter And Representative Kelli Butler Translating Health Policy into Research TRANSLATING HEALTH POLICY INTO

153 views • 3 slides
Kate Anderson Communication Specialist Port of Everett Luke Diserio CEO American Muscle

Kate Anderson Communication Specialist Port of Everett Luke Diserio CEO American Muscle

Kate Anderson Communication Specialist Port of Everett Luke Diserio CEO American Muscle Docks and Fabrication Colin Hassenger Dir. Of Marine Engineering Edgewater Resources, LLC Darrell Jones Owner Aquatic Holdings, Dam

203 views • 16 slides
Interim Report 2011 Contents Highlights 1 Chief Executive Officers Review 2 Condensed

Interim Report 2011 Contents Highlights 1 Chief Executive Officers Review 2 Condensed

Cineworld Group plc Interim Report 2011 Contents Highlights 1 Chief Executive Officers Review 2 Condensed Consolidated Statement of Comprehensive Income 11 Condensed Consolidated Statement of Financial Position 12 Condensed

540 views • 24 slides
Key L Largo O Ocean R Resorts Poli licie ies a and Procedures f for P Presentatio ion o

Key L Largo O Ocean R Resorts Poli licie ies a and Procedures f for P Presentatio ion o

Key L Largo O Ocean R Resorts Poli licie ies a and Procedures f for P Presentatio ion o of Pla lans f for Archit itectural l Review B Board ARB Owners must follow the KLOR Guidelines, found on http://www.keylargooceanresort.com, as

502 views • 3 slides
9 x 2 4K Presentation Matrix Switch VP1920 User Manual www.aten.com VP1920 User Manual Preface

9 x 2 4K Presentation Matrix Switch VP1920 User Manual www.aten.com VP1920 User Manual Preface

9 x 2 4K Presentation Matrix Switch VP1920 User Manual www.aten.com VP1920 User Manual Preface EMC Information FEDERAL COMMUNICATIONS COMMISSION INTERFERENCE STATEMENT: This equipment has been tested and found to comply with the limits for a

935 views • 39 slides
New Threat Vectors for ICS/SCADA Networks and How to Prepare for Them June 27, 2017 Phil

New Threat Vectors for ICS/SCADA Networks and How to Prepare for Them June 27, 2017 Phil

New Threat Vectors for ICS/SCADA Networks and How to Prepare for Them June 27, 2017 Phil Neray, VP of Industrial Cybersecurity Why Now? Featuring CyberXs threat intelligence & vulnerability research 3 Key Trends Driving ICS

537 views • 25 slides
Young Alumni Council Fall Retreat 2015 Commonwealth Stadium Lexington, Kentucky UK Alumni

Young Alumni Council Fall Retreat 2015 Commonwealth Stadium Lexington, Kentucky UK Alumni

Young Alumni Council Fall Retreat 2015 Commonwealth Stadium Lexington, Kentucky UK Alumni Association History Our Story The University of Kentucky Alumni Association traces its history to 1889, when Joseph H. "Little Joe"

201 views • 16 slides

More recommend