International Journal For Multidisciplinary Research

E-ISSN: 2582-2160   •   Impact Factor: 9.24

A Widely Indexed Open Access Peer Reviewed Multidisciplinary Bi-monthly Scholarly International Journal

Call for Paper Volume 8, Issue 5 (September-October 2026) Submit your research before last 3 days of October to publish your research paper in the issue of September-October.
Submit Research Paper Join as a Reviewer

Plagiarism is checked by the leading plagiarism checker TurnItIn

Call for Paper

Volume 8 Issue 5
September-October 2026

Submit your research paper

Indexing Partners
Academia Advanced Sciences Index Bielefeld Academic Search Engine CiteSeer DRJI Google Scholar Independent Search Engine & Directory Network ISI (International Scientific Indexing) Issuu Mendeley Research Networks
RefSeek ResearcherId - Thomson Reuters ResearchGate Scirus Scribd Semantic Scholar UTeM - Universiti Teknikal Malaysia Melaka Wiki for Call for Papers WorldCat Zenodo

Development Of REST API Using OWASP Top 10 Rules

Author(s) Mr. OMKAR G K, Mr. NITESH M, Mr. SANDEEP REDDY, Dr. Prabhakar M
Country India
Abstract Application Programming Interfaces (APIs) play an important role in digital transformation but still stand among the most vulnerable entities in modern IT architectures. An extensive literature review, including such titles as Secure APIs,
API Security in Action, Microservices Security in Action, and OWASP API Security Top 10, highlights common vulnerabilities associated with APIs, which include, among others, broken authentication, over-exposure of data, and misconfiguration of endpoints. Complementing these works are such sources as The Web Application Hacker’s Handbook and REST API Design Rulebook, which emphasizes the importance of secure API design, while Cloud Native Security and Practical API Security provide similar recommendations for cloud-native implementations. Combining the ideas from above, this research paper presents a coherent framework for building secure APIs based on the OWASP Top 10 guidelines for the whole lifecycle of an application development. Using a prototype, the author demonstrates how Early control measures can prevent potential exploits, ensure resilience in case of an automated attack, and increase regulatory
compliance.
Keywords OWASP API Security Top 10, broken object level authorization (bola), broken authentication, excessive data exposure, rate limiting, injection attacks, server-side request forgery (ssrf), security misconfiguration, jwt (json web token), oauth 2.0, openid connect, api gateway, zero trust architecture, penetration testing, microservices security, rest api, graphql security, api lifecycle, threat modeling, input validation, least privilege principle, transport layer security (tls), api versioning, role-based access control (rbac), api throttling, sensitive data exposure, mass assignment, improper asset management, function level authorization, secure sdlc
Field Engineering
Published In Volume 8, Issue 2, March-April 2026
Published On 2026-04-24
DOI https://doi.org/10.36948/ijfmr.2026.v08i02.75812
View / Download PDF File

Share this



E-ISSN 2582-2160
CrossRef

CrossRef DOI prefix of IJFMR is 10.36948/ijfmr

Downloads
Research Paper Format Copyright Permission Form and Undertaking Form

All research papers published on this website are licensed under Creative Commons Attribution-ShareAlike 4.0 International License, and all rights belong to their respective authors/researchers.

CC-BY-SA Open Access

About IJFMR
Fees & Payment
Current Issue
Publication Archive 		Submit Research Paper
Track Submission Status
Publication Guidelines
Publication Ethics
Peer Review & Plagiarism 		Join as a Reviewer
Editors & Reviewers
Reviewer Referral Program
Get Reviewer Membership Certi. 		Website/Journal Policies
Usage Policy
Content Policies
Privacy Policy
Contact Us +91-9687-828-838 editor@ijfmr.com
Powered by Sky Research Publication and Journals