[33]. [24] reported 42% Web API consumers encountered
security issues. This section focuses on the solutions for Web
API security.
Web API in this paper is defined as SOAP or REST web
service which comes as just a specification of remote calls
exposed to the API consumers. SOAP web service API has
relevant mature security mechanism based on its WS-security
standards [31]. However, in mobile cloud world, REST web
service API has been becoming mainstream [5][30] due to its
simplicity and ubiquity. The section will mainly discuss
REST API security challenges, solutions, and standards