REST API SECURITY AUDIT

Национальная безопасность России: актуальные аспекты: сборник избранных статей Всероссийской научно-практической конференции (Санкт-Петербург, Июль 2020) ◽

10.37539/nb186.2020.56.50.005 ◽

2020 ◽

Author(s):

Леонид Сергеевич Сенько

Keyword(s):

Security Audit ◽

Rest Api

В данной статье рассматриваются понятие REST API, обобщение основных уязвимостей REST API от OWASP, а также приведены рекомендации к проведению аудита безопасности REST API. This article discusses the concept of REST API, summarizes the main vulnerabilities of the rest API from OWASP, and provides recommendations for conducting a security audit of the REST API.

Download Full-text

Determination of the weight of audit evidence by the method of point ratings in the information security audit

Computational nanotechnology ◽

10.33693/2313-223x-2020-7-1-57-62 ◽

2020 ◽

Vol 7 (1) ◽

pp. 57-62

Author(s):

Vladislav A. Voevodin ◽

◽

Maria S. Markina ◽

Pavel V. Markin ◽

◽

...

Keyword(s):

Information Security ◽

Security Audit ◽

Audit Evidence

Download Full-text

EVALUASI ANR PADA TRANSMISI DATA NETWORK TERHADAP WP-REST API DALAM APLIKASI ANDROID

KOMIK (Konferensi Nasional Teknologi Informasi dan Komputer) ◽

10.30865/.v2i1.901 ◽

2018 ◽

Vol 2 (1) ◽

Author(s):

Agung Riyadi

Keyword(s):

Large Data ◽

Data Retrieval ◽

Test Results ◽

Android Application ◽

Retrieval Process ◽

Request Queue ◽

Plant Data ◽

Android Development ◽

Rest Api ◽

The One

The One of many way to connect to the database through the android application is using volleyball and RESTAPI. By using RestAPI, the android application does not directly connect to the database but there is an intermediary in the form of an API. In android development, Android-volley has the disadvantage of making requests from large and large data, so an evaluation is needed to test the capabilities of the Android volley. This research was conducted to test android-volley to retrieve data through RESTAPI presented in the form of an application to retrieve medicinal plant data. From the test results can be used by volley an error occurs when the back button is pressed, in this case another process is carried out if the previous volley has not been loaded. This error occurred on several android versions such as lollipops and marshmallows also on some brands of devices. So that in using android-volley developer need to check the request queue process that is carried out by the user, if the data retrieval process by volley has not been completed, it is necessary to stop the process to download data using volley so that there is no Android Not Responding (ANR) error.Keywords: Android, Volley, WP REST API, ANR Error

Download Full-text

Pembangunan Web Service Data Masyarakat Menggunakan REST API dengan Access Token

Jurnal ULTIMA Computing ◽

10.31937/sk.v10i1.838 ◽

2018 ◽

Vol 10 (1) ◽

pp. 19-26 ◽

Cited By ~ 1

Author(s):

Muhammad Iqbal Perkasa ◽

Eko Budi Setiawan

Keyword(s):

Web Service ◽

Job Search ◽

Population Data ◽

The Public ◽

Public Data ◽

Community Data ◽

The Government ◽

Rest Api ◽

Service Application ◽

Service Data

Data is one of the most important things in this information and information technology era that evolving now. Currently, the government still has not used the public data maximally for administrative purposes. Utilization of this big population data is the creation of a web service application system with REST API where this data will be open and accessible to those who have access. One of the institutions that use this service is the Manpower and Transmigration Service where this system can make the Dinas staff more efficient to create and register job search cards using available community data. This application is able to provide and facilitate many parties, such as data administrators to monitor data usage, registration employee in input data, and people able to register independently. Index Terms—Web service, API, Rest api, People data

Download Full-text

Security Audit of Computing Resources

SSRN Electronic Journal ◽

10.2139/ssrn.2003401 ◽

2010 ◽

Author(s):

Aiman Athambawa

Keyword(s):

Security Audit

Download Full-text

As-RaD System as a Design Model of the Network Automation Configuration System Based on the REST-API and Django Framework

Kinetik Game Technology Information System Computer Network Computing Electronics and Control ◽

10.22219/kinetik.v5i4.1093 ◽

2020 ◽

pp. 291-298

Author(s):

Adian Fatchur Rochim ◽

Abda Rafi ◽

Adnan Fauzi ◽

Kurniawan Teguh Martono

Keyword(s):

Information Technology ◽

Application Programming Interface ◽

Design Model ◽

Automation System ◽

Network Configuration ◽

Web Based ◽

Representational State Transfer ◽

Application Programming ◽

Rest Api ◽

Python Programming

The use of information technology these days are very high. From business through education activities tend to use this technology most of the time. Information technology uses computer networks for integration and management data. To avoid business problems, the number of network devices installed requires a manageable network configuration for easier maintenance. Traditionally, each of network devices has to be manually configured by network administrators. This process takes time and inefficient. Network automation methods exist to overcome the repetitive process. Design model uses a web-based application for maintenance and automates networking tasks. In this research, the network automation system implemented and built a controller application that used REST API (Representational State Transfer Application Programming Interface) architecture and built by Django framework with Python programming language. The design modeled namely As-RaD System. The network devices used in this research are Cisco CSR1000V because it supports REST API communication to manage its network configuration and could be placed on the server either. The As-RaD System provides 75% faster performance than Paramiko and 92% than NAPALM.

Download Full-text