The New API Vulnerability Frontier
summary
Claims that APIs now account for over 90% of web traffic and that APIs are the primary attack surface, with persistent issues like broken object level authorization. Describes an AI-driven solution that auto-discovers APIs down to domain/group/method/argument, surfaces vulnerabilities as developer-friendly vectors, and enforces real-time challenges per request using a machine-learning “quasi-compiler.” Shows a tiered SOC dashboard, recommends virtual segmentation and partner/user tagging, notes OAuth control gaps and the need to integrate API defenses with existing SIEM/SOC tooling.
AI-written summary · about
chapters (16)
- 0:00Intro
- 0:44Overview
- 2:44Responsibility
- 3:40Strength
- 5:38API Evolution
- 6:29Web Traffic
- 8:33Full Stack Approach
- 9:38Cyber Trends
- 10:38Impacts
- 12:10The problem with API
- 12:50The CISO
- 14:42API Design
- 15:46Tier 2 Dashboard
- 16:33Attack Surface
- 21:15Zero Trust
- 24:23QA
related talks
31mAPI security
23mTraceable AI
24mDiscussion between Mehdi Medjaoui and Troy Leliard,API Security.
19mAvoid These API Security Pitfalls: Expert Insights
26mOffensive API Penetration Testing
58mA Risk based Approach to API Security
01mOn The Value Of API Security Focus
01h 29mAPI Vulnerabilities and What to Do About Them