Five-step plan for securing your APIs
summary
Concrete five-step checklist plus timelines: inventory APIs and risks, deploy edge API gateways to enforce global per-key rate limiting, add IP reputation and bot management, harden auth (OAuth/JWT, client certs) and validate payloads. Demonstration shows a distributed gateway network syncing quotas across locations to hold a 100 req/s limit per key and deny excess successfully. Callouts: a customer with ~20 billion API hits/day, 28 billion credential-stuffing attempts in eight months, and bot traffic often >50%. Actionable: assess in 7 days, map in 1 month, evaluate tools in 3 months.
AI-written summary · about
chapters (8)
- 0:00Introduction and agenda
- 2:27API growth and challenges
- 6:12Common vulnerabilities
- 12:54Comprehensive security view
- 26:03Four critical attack vectors
- 30:34Mitigation strategies
- 40:14Leveraging edge technology
- 50:58Implementation roadmap
related talks
23mFrom API Intelligence to API Governance [...]
25m10 steps to secure your API
25mAPI Security Deep Dive: Safeguard Your Digital Assets
25mSecuring your APIs at Scale
32mApisecure, 14 & 15 March 2023 - Shannon Wilkinson, Cybersecurity Founder | Women in Technology [...]
29mDefence in depth
20mFrom Chaos to Calm: Navigating Emerging API Security Challenges.
33mImproving API Security Posture.