RESTful APIs are an increasingly common attack vector for applications. Despite this ever-present threat, open source and commercial vendor support for automatic API security scanners remains limited. With the rate at which APIs are developed, enhanced and deployed, this lack of security test automation creates a gap that at its best limits adoption, and at its worst may leave an application open to attack. To fill the gap in security testing efficiency, members of the Rackspace Quality Engineering and Security Engineering teams worked together to create an Open Source, automated API security scanner
.
Syntribos is a flexible, automated scanner that provides configurable test coverage for any RESTful API, and has significantly improved the security test workflow at Rackspace. In this talk, you’ll understand the potential for Syntribos automation in your security program as we
• Discuss the design and architecture details
• Illustrate the simple configuration requirements
• Lay out the painless steps for adding new test types
• Describe the plugin support
Learn how Syntribos enables you to test RESTful APIs in an automated way, helping to detect and eliminate common security vulnerabilities such as SQL injection, command injection, denial of service attacks, and more.
Watch the Talk Video
