Securing Value in API Ecosystems
summary
Argues that using identity-driven security as the foundation for APIs turns security into measurable value: mutual TLS/PKI, OAuth2/OpenID Connect, token introspection and adaptive step‑up authentication reduce breach risk and enable personalization. Recommends decoupled security service rather than loading API gateways, classifying microservices for selective introspection, and using voice/biometric factors. Cites Gartner prediction that API abuse becomes the top attack vector and an OCBC/MyInfo KYC rollout that yields 3x account signup; shows scale examples from ~100k to tens of millions of transactions.
AI-written summary · about
chapters (8)
- 0:00Start
- 1:28Why Enterprises use APIs
- 3:44Benefits of API Ecosystems
- 5:35Securing APIs is Critical
- 8:34Why Digital Identity?
- 14:53Challenge : Trust Beyond the Perimeter
- 17:05API Security - Building Blocks
- 27:04Secure & Frictionless Authentication Journeys. powered by Authentication
related talks
18mSecure your Apps and APIs with strong authentication and Adaptive Access.
18mAPI Security Simplified: A 5-Pillar Approach
24mSecuring APIs in a Zero Trust Network Environment
23mMicroservice Security at the API Level
24mCriticality of identity: The importance of knowing who your API consumer is
01mOn The Value Of API Security Focus
22mLayered Approach of API Security Strategies and its Business Impact
26mSecurity Is an API: Evolving to a decentralised security culture