Säkerhetsutvärdering av Open Banking Autentiseringsflöden med API Gateway Integration

Many financial systems opened up to interconnection as a direct result of new legislationon an EU level. This caused many financial institutions to adopt API:s for intercommu-nication of important data and to execute transactions. This paper seeks to examine onesuch implementation.This paper examines the implementation of an API gateway to validate and facilitateOpen Banking authentication flow access, focusing on the challenges related to security.The study evaluates the target of evaluation accessible through an API gateway. Byemploying quantitative assurance metric the paper aims to derive a qualitative secu-rity assessment. The evaluation utilizes the Goal-Question-Metric (GQM) methodology,drawing from the OWASP REST Security Cheat Sheet to establish security requirementsand metrics. The findings reveal a moderate to high level of security compliance, and theresults provide insights into the effectiveness of quantitative security metrics and highlightareas for improvement in securing Open Banking authentication flows.