The two main types are API abuse or business logic abuse and BOLA attacks or mass assignment attacks. “There are really two different forms of attacks of APIs,” he explained.