Rethinking Broken Object Level Authorization Attacks Under Zero Trust Principle

Anbin Wu, Zhiyong Feng, Ruitao Feng +2

RESTful APIs facilitate data exchange between applications, but they also expose sensitive resources to potential exploitation. Broken Object Level Authorization (BOLA) is the top…