Detecting Misuse of Security APIs: A Systematic Review

arXiv:2306.08869v2 Announce Type: replace
Abstract: Security Application Programming Interfaces (APIs) are crucial for ensuring software security. However, their misuse introduces vulnerabilities, potentially leading to severe data breaches and substantial financial loss. Complex API design, inadequate documentation, and insufficient security training often lead to unintentional misuse by developers. The software security community has devised and evaluated several approaches to detecting security API misuse to help developers and organizations. This study rigorously reviews the literature on detecting misuse of security APIs to …

api api design apis application application programming interfaces arxiv breaches community cs.cr cs.se data data breaches design developers documentation financial loss programming review security security apis security application security community security training software software security training unintentional vulnerabilities