Skip to content
Security / Governance, Risk & Compliance

API security - protection and access control

The training focuses on key aspects of API security, presenting advanced techniques for protection and access control. The program covers both the theoretical basics of API security and practical methods of security implementation. The workshop enables participants to gain hands-on experience in identifying threats, implementing protection mechanisms and auditing the security of software interfaces.

Issues

  • API threat models

  • Authentication mechanisms

  • OAuth and JWT standards

  • Data validation

  • Rate limiting

  • Encryption of communications

  • Security monitoring

  • Access audit

  • Responding to incidents

  • OWASP Best Practices

Benefits

  • Acquire advanced knowledge in securing APIs
  • Gain practical skills in implementing authentication and authorization mechanisms
  • Detecting and preventing attacks on APIs
  • Methods for effective monitoring of the security of interfaces
  • The area of API security auditing
  • Responding to security incidents

Who is this training for?

Architects of systems security
Developers responsible for API security
Cyber security specialists
Systems security auditors
DevSecOps engineers
API platform administrators

Prerequisites

  • Knowledge of the basics of application security
  • Experience in API development or management
  • Basic knowledge of authentication protocols
  • Knowledge of security standards

Training program

01

Threat models for APIs

  • Safety standards
  • Most common vulnerabilities
  • Protection strategies
  • Authentication and authorization mechanisms
02

OAuth 2.0 implementation

  • JWT tokens and management
  • Roles and powers
  • Identity management
  • Protection against attacks
03

Preventing OWASP API attacks

  • Validation of input data
  • Rate limiting and throttling
  • Encryption and digital signatures
04

Monitoring and response

  • Intrusion detection systems
  • Security log analysis
  • Incident response procedures
  • Security audit

Delivery Methods

Online

  • Convenience of participating from anywhere
  • Interactive live sessions with trainer
  • Materials available for 30 days
  • No travel costs

On-site

  • Direct contact with trainer and group
  • Intensive hands-on workshops
  • Networking with other participants
  • Full focus on learning

Frequently asked questions

Who is the API security - protection and access control training for?

This training is designed for professionals looking to develop skills in api security - protection and access control. Required level: advanced.

How long is the API security - protection and access control training?

The training lasts 1. Available in online or on-site format.

Will I receive a certificate?

Yes — every participant receives a completion certificate confirming acquired competencies. EITT holds ISO 9001 accreditation.

Can this training be conducted for a closed group?

Yes — we offer dedicated closed trainings for companies. We customize the program to your team's needs. Contact us for an individual quote.

Adrian Kwiatkowski
Adrian Kwiatkowski Opiekun szkolenia

Request a quote

Funding Options

Check funding options for your company

Up to 80%

Development Services Database

Up to 80% funding for SMEs from EU funds

Check availability
Up to 100%

National Training Fund

Up to 100% funding for employers

Learn more

Trusted by

We train teams at Poland's largest companies

ING Bank - EITT client
mBank - EITT client
PKO Bank Polski - EITT client
PZU - EITT client
Allianz - EITT client
T-Mobile - EITT client
KGHM - EITT client
PGE - EITT client
IKEA - EITT client
InPost - EITT client
Leroy Merlin - EITT client
ZUS - EITT client

Interested in this training?

Contact us - we'll prepare an offer tailored to your organization's needs.

500+ experts
2500+ trainings available
ISO 9001 quality certified
Request Training
Call us +48 22 487 84 90