System Design Curriculum

Track 13: Security, Abuse Prevention, and Rate Limiting

Design secure API gateways authorizations, sliding window rate limiters, and bot abuse detectors.

Syllabus Modules

Syllabus modules coming soon.

Planned Practice Projects

Projects mapping coming soon.

Learning Outcomes

  • Build sliding window rate limit counters using Redis sorted sets
  • Enforce JSON Web Tokens verification rules on API endpoints
  • Implement append-only audit log streams tracking administrative writes

Interview Defense

  • Defend token bucket vs leaky bucket algorithm behaviors under burst request limits
  • Propose defenses protecting APIs from credential stuffing and bot DDoS