BOLA, IDOR, MA, BFLA. Welcome to the OWASP API Top 10!
Adam Fisher at BSidesSLC 2020
A foundational element of innovation in today’s app-driven world is the API. APIs are a critical part of modern mobile, SaaS and web applications and can be found in customer-facing, partner-facing and internal applications. By nature, APIs expose application logic and sensitive data such as Personally Identifiable Information (PII) and because of this have increasingly become a target for attackers.