open-appsec ([ Ссылка ]) is an open source initiative that builds on machine learning. It provides preemptive web app and API threat protection against OWASP-Top-10 and 0-day attacks.
In this tutorial, we will show you how to protect Web Applications & APIs by adding open-appsec, an automatic machine learning security engine, to a Kong API Gateway.
We will use a demo API that has multiple security vulnerabilities that will help us demonstrate open-appsec’s capabilities.
You will learn how to:
• Attack the API by performing an SQL Injection (simple attack for demo purposes)
• Deploy Kong as API Gateway that will serve the API.
• Deploy open-appsec for Kong Gateway to protect the API.
• Attack the API again to see that the protection is effective.
• And finally connect your deployment to the Web-Based Management (SaaS).
you can also run the Playground environment by yourself by selecting [ Ссылка ].
![](https://s2.save4k.ru/pic/R45V8YbPasI/maxresdefault.jpg)