Desenvolvimento de uma artefato para aprendizado sobre segurança da informação em APIs

Abstract

In today’s world, Application Programming Interfaces (APIs) play a crucial role in applications by enabling integration between different systems. However, due to the sensitivity of the data and personal information that APIs handle, they are often targeted by malicious actors. To assist developers and security analysts, the Open Web Application Security Project (OWASP) has published a list of the top ten most common API security problems, aiming to identify and provide guidance on resolving them. In this context, this article proposes an innovative approach to learning security in APIs, utilizing the problem-based learning method known as Problem-Based Learning (PBL). This approach will actively engage students in solving real challenges related to API security, exposing them to authentic problems and developing practical skills in analysis, vulnerability identification, and countermeasure application.