n After the privacy and sensitive information security inspection, we will now explore API and fuzz testing. As the cloud software release can be on an API-level basis, there can be hundreds of APIs released at a time. The software development team will definitely need an effective way to automate the security testing for every API release. In this chapter, we will elaborate further with the help of an example by using an online pet store for how to build your automated API security testing framework with various tools. The API security testing focuses mainly on the data injection and abnormal payload. Therefore, the Fuzz testing will also be introduced as random data input and security injection for the automated API security testing.
The following topics will be discussed in this chapter:
- Automated security testing for every API release
- How to...