Source: https://owasp.org/www-pdf-archive/OWASP_APIs_Security_Project_Kick_Off.pdf