Chijioke Iremeka
In celebration of women achieving significant feats and entering traditionally male-dominated fields, Confidence Staveley, a female software engineer and cybersecurity specialist, is being honoured nationwide.
She is being recognised as the first female author of an Application Programming Interface, popularly known as API, meant to protect biodata breaches and others in Nigeria.
APIs are mechanisms that enable two software components to communicate with each other using a set of definitions and protocols, as defined by Amazon Web Services.
Her book, ‘API Security for White Hat Hackers’ aims to address cybersecurity breaches by ensuring that sensitive human biodata and other information placed on the web are protected from cybercriminals, who may exploit them for personal gain.
Breaking ground as Nigeria’s first female API book author, Staveley, who is also the founder of CyberSafe Foundation and MerkieFence, equips data managers, web developers, and software developers with essential tools in her book.
She aims to ensure they build secure data centres by design and default and enhance cybersecurity measures against potential threats.
In praising her achievements, the Chief Executive Officer of Devici and General Partner at Kerr Ventures, Christopher Romeo, lauded Staveley as a leading authority, emphasising the importance of her perspective on the critical impact of APIs and their potential risks to data security and privacy.
According to him, Staveley, a distinguished cybersecurity leader with multiple awards and a background in software engineering, specialises in application security and cybersecurity strategy.
Romeo highlighted her ability to translate complex cybersecurity concepts into understandable insights for various audiences.
He noted that Staveley, who holds an advanced diploma in software engineering and a Master’s in IT management from the University of Bradford, is “a formidable voice in the realm of cybersecurity and embodies the next generation of cybersecurity professionals.”
Speaking on being celebrated as the first female API author in Nigeria, he noted that APIs form the backbone of modern applications.
Romeo added, “Whether you are using the web, mobile applications, or even interacting with AI services, APIs are integral to daily operations.
“Cybercriminals are increasingly targeting APIs, recognising their crucial role in the data flow and functionality of applications, as well as the gateway they provide to valuable organisational data.
“Whether you are a developer, security professional, or ethical hacker, this book is designed to assist you in securing your APIs and safeguarding your organisation’s data.
“If you examine any major breach in recent years, it is invariably linked to APIs in some manner. API Security for White Hat Hackers goes beyond its title; it provides a comprehensive exploration of API security.
“This book offers a hands-on approach to learning, focusing on practical exercises that walk readers through the process of testing APIs, identifying vulnerabilities, and implementing effective solutions.”
He noted that by focusing on real-world scenarios, readers gain invaluable experience in bypassing authentication controls, circumventing authorisation mechanisms, and identifying common vulnerabilities using both open-source and commercial tools.
Romeo added: “I truly appreciate the meticulous attention Staveley has given to demonstrating how APIs can be compromised, while also providing essential guidance on designing and threat modelling secure APIs from inception.
“By acquiring red team/breaker knowledge of API security, you position yourself to implement security controls that safeguard your APIs effectively and, ultimately, your customers’ data.”
Speaking exclusively with PUNCH Healthwise, Staveley mentioned that her book, set for release on July 28, 2024, has already assumed a best-seller status on Amazon.
She emphasised that the book is intended for everyone involved in building, maintaining, and securing APIs, and ensuring that their API and security data remain inaccessible to unauthorised individuals.
Staveley noted that the utmost priority is to enhance the security of African APIs to mitigate the prevalence of data breaches experienced in this region.
She said, “The 13 chapters cover various topics, ranging from developers constructing APIs to cybersecurity and information security professionals in the early stages of their careers.
“It also caters to management-level cybersecurity professionals aiding boards in risk management, as well as other stakeholders involved in API development and maintenance. There is something for everyone at different stages of their career as long as you are involved with APIs.
“This book is crucial for web developers, cybersecurity professionals, and decision-makers at the management level of institutions dealing with data. The insights provided will significantly enhance their ability to develop and secure APIs.
“This is the first cybersecurity book authored by a woman. I identified a problem and chose to provide solutions through knowledge, as there’s nothing more effective in solving problems. Ensuring these problems are addressed motivated me to compile this paper.
“Within the next five years, I aim to publish the next edition. I envision this book becoming a staple on people’s shelves, serving as a guide for them.”
Highlighting the risks of inadequate API monitoring, she said that neglecting regular application checks leaves vulnerabilities that bad actors can exploit for their gain.
Staveley noted that there is need to proactively defend our applications, saying that this approach, known as ‘defend by offending,’ aims to close security gaps.
According to her, the greatest threat lies in organisations failing to implement even the most fundamental security measures, leading to vulnerabilities that malicious actors can exploit.
She stressed that basic security measures include ensuring strong usernames and passwords and implementing multiple layers of protection which are crucial in integrating them effectively.
Staveley added, “In everyday life, this translates to using two-factor authentication for our social media accounts. Unfortunately, many organisations lack these layered security approaches, which is a major
“A significant number of attacks begin with deception, such as clicking on harmful links in emails, which is a focal point of discussion in this book. For me, it was crucial to share my knowledge in a manner that empowers businesses and organisations to safeguard our data.
“This motivation drove me to write this book. Many of the insights in the book stem from my decade-long experience in the industry. Others are derived from global standards and best practices.”
“I have also developed an intentionally vulnerable API as part of this hands-on book. Readers can engage directly with this API to learn how to defend against attacks by understanding how attackers might exploit vulnerabilities.”
Copyright PUNCH
All rights reserved. This material, and other digital content on this website, may not be reproduced, published, broadcast, rewritten or redistributed in whole or in part without prior express written permission from PUNCH.
Contact: health_wise@punchng.com
The post Nigeria’s first female author in API cybersecurity dominating tech space appeared first on Healthwise.