RESTful Web Services

Explore RESTful Web Services in this 44-minute conference talk by Jeremy Druin (@webpwnized) for ISSA Kentuckiana. Dive into various aspects of web service security, including test methods, user authentication, baseline responses, and data manipulation. Learn about sorting and grouping responses, username enumeration techniques, and potential vulnerabilities like SQL injection. Gain insights on the DELETE method and its implications for web service security. Access this comprehensive overview of RESTful Web Services security to enhance your understanding of potential risks and best practices in API development and testing.

Intro
Web Services
Test Methods
User Names
Passwords
Baseline Response
Sorting Responses
Group Responses
Username Enumeration
Username Fields
Throttle
SQL Injection
Delete Method