<div>
<div class="content wysiwyg-content">
<a href="https://www.owasp.org/images/f/f6/Owasp_api_security_toc.pdf" rel="ugc">https://www.owasp.org/images/f/f6/Owasp_api_security_toc.pdf</a><br />
<br />
Browsed OWASP site &amp;&nbsp;seems like OWASP API Security &nbsp;guide or checklist<br />
was just initiated in Dec '18:<br />
<br />
a) did I miss or there is already a guide that have been released? &nbsp;Can<br />
&nbsp; &nbsp; point me to it? &nbsp;The above link only give a Table of Content, is there<br />
&nbsp; &nbsp; a full guide?<br />
<br />
b) if it's not released yet, perhaps can point me to a full guide on API<br />
&nbsp; &nbsp; &nbsp;security?
</div>
</div>


https://www.owasp.org/images/f/f6/Owasp_api_security_toc.pdf

Browsed OWASP site & seems like OWASP API Security  guide or checklist
was just initiated in Dec '18:

a) did I miss or there is already a guide that have been released?  Can
    point me to it?  The above link only give a Table of Content, is there
    a full guide?

b) if it's not released yet, perhaps can point me to a full guide on API
     security?

API Security checklist or guide

Web applications are systems that run in browsers that perform functions normally associated with other client-based programs. One of the most commonly used web applications is email; instead of downloading individual emails to a local machine, the data is shown through a website. Other examples of web applications are collaborative systems like a wiki or an online game.

Web Applications

Operating system security (OS security) is the process of ensuring OS integrity, confidentiality and availability. OS security refers to specified steps or measures used to protect the OS from threats, viruses, worms, malware or remote hacker intrusions. OS security encompasses all preventive-control techniques, which safeguard any computer assets capable of being stolen, edited or deleted if OS security is compromised, including authentication, passwords and threats to systems and programs.

OS Security

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.