DEV Community

Detecting API enumeration Series' Articles

Back to DarkEdges's Series
Your API is being enumerated by a client with a perfectly valid token
darkedges profile

Your API is being enumerated by a client with a perfectly valid token

#security #api #architecture #typescript
Comments
5 min read
Simulating attackers is easy. Simulating legitimate users is the hard part
darkedges profile

Simulating attackers is easy. Simulating legitimate users is the hard part

#security #api #testing #architecture
Comments
6 min read
The most obvious signals for detecting enumeration don't work
darkedges profile

The most obvious signals for detecting enumeration don't work

#security #api #datascience #architecture
Comments
6 min read
Three detection layers that disagree usefully, and why they combine by max, not sum
darkedges profile

Three detection layers that disagree usefully, and why they combine by max, not sum

#security #machinelearning #architecture #typescript
Comments
7 min read
Four ways a baseline quietly destroys the anomaly detector built on it
darkedges profile

Four ways a baseline quietly destroys the anomaly detector built on it

#security #machinelearning #debugging #architecture
Comments
5 min read
Honeytokens that recognise themselves: stateless decoys with automatic attribution
darkedges profile

Honeytokens that recognise themselves: stateless decoys with automatic attribution

#security #api #cryptography #architecture
Comments
5 min read
A graduated response ladder where every rung is invisible
darkedges profile

A graduated response ladder where every rung is invisible

#security #api #architecture #opa
Comments
6 min read
My detector caught the attacker and never once stopped it, and reported PASS
darkedges profile

My detector caught the attacker and never once stopped it, and reported PASS

#security #debugging #testing #architecture
Comments
6 min read