ENSURING API SECURITY IN WEB SERVICES DEVELOPED IN PYTHON
##semicolon##
Keywords: RESTFull API , Artificial Intelligence (AI) , Machine Learning (ML) , Deep Learning , Natural Language Processing (NLP) , Real-Time Analysis.##article.abstract##
Abstract: This article discusses the key points of developing a secure RESTful web service API for keeping a student achievement journal. The relevance of using web services has been analyzed. The classification of web applications is given. The features of the Single Page Application architecture were considered. Comparative characteristics of architectural styles of application programming interfaces are given. Requirements to be met by RESTful API services are considered. The basic principles of API security were analyzed. A list of the main vulnerabilities that may appear during the development of the REST API is given. An overview of popular authentication schemes (methods) is given. Comparative characteristics of web frameworks of the Python programming language are given. The main tools used in the development of web API applications are listed. The process of creating a secure prototype of a RESTful web service API in Python using the Flask microframework and a tool for describing the Swagger specifications is presented. The process of configuring the application was examined in detail. The main recommendations for securing a web application, database and web server settings are listed. The key points of ensuring the protection of the developed web application are considered. The results obtained were analyzed.
##submission.citations##
1. Kai Hwang, Zhiwei Xu – Distributed and Cloud Computing: From Parallel Processing to Big Data
2. Murat Kantarcioglu – Artificial Intelligence for Cybersecurity: A Comprehensive Guide
3. Charles Brooks – Cybersecurity Issues and AI Solutions in Modern IT Environments
4. Roman V. Yampolskiy – Artificial Intelligence Safety and Cybersecurity
5. Ali Dehghantanha, Reza M. Parizi – Machine Learning Applications in Cybersecurity
6. Sumeet Gupta, Manoj Singh Gaur, Vijay Laxmi – AI-Based Network Intrusion Detection Systems: A Survey
7. MIT CSAIL - Artificial Intelligence & Cybersecurity Research – https://www.csail.mit.edu/
8. IEEE Xplore Digital Library – AI and Cybersecurity – https://ieeexplore.ieee.org/
9. Springer Journal of Cybersecurity and AI Integration – https://www.springer.com/journal/144
10. Ponemon Institute Reports on AI in Cybersecurity – https://www.ponemon.org/
