open-appsec ([ Ссылка ]) is an open source initiative that builds on machine learning. It provides preemptive web app and API threat protection against OWASP-Top-10 and 0-day attacks.

In this tutorial, we will show you how to protect Web Applications & APIs by adding open-appsec, an automatic machine learning security engine, to a Kong API Gateway.

We will use a demo API that has multiple security vulnerabilities that will help us demonstrate open-appsec’s capabilities.
You will learn how to:
• Attack the API by performing an SQL Injection (simple attack for demo purposes)
• Deploy Kong as API Gateway that will serve the API.
• Deploy open-appsec for Kong Gateway to protect the API.
• Attack the API again to see that the protection is effective.
• And finally connect your deployment to the Web-Based Management (SaaS).

you can also run the Playground environment by yourself by selecting [ Ссылка ].

свернуть