API Security: Code-to-Cloud Context for Complete Protection
summary
Enterprises see 90,000 new APIs across ten customers and a 1:159 ratio of appsec to developers, so the session shows a combined Code-to-runtime pipeline that actually finds and fixes gaps: Akamai discovers runtime APIs and traffic patterns (3B DDoS daily, 7B injection attempts on busy days, 24B bot requests at auth), Apiiro runs DCA deep code analysis across 15 languages, matches runtime endpoints to code, opens PRs or blocks risky merges via policy as code, and demonstrably surfaces missing authorization for faster remediation.
AI-written summary · about
chapters (14)
- 0:00API security challenges
- 1:01API growth with AI tools
- 3:59Industry trends and attacks
- 8:12Code-to-runtime security challenges
- 14:22API risks in development lifecycle
- 18:16Code-to-runtime protection approach
- 20:29Deep code analysis for APIs
- 25:34Runtime and code insights for remediation
- 27:22API risk prioritization case study
- 31:01Matching APIs code to runtime
- 33:10Live demo setup and integration
- 34:13Code-to-runtime matching demo
- 37:10Guided remediation and coverage
- 41:56Summary and Q&A
related talks
20mFrom Chaos to Calm: Navigating Emerging API Security Challenges.
24mAPI Security in DevSecOps: Built-In, Not Bolted On
49mApisecure, 14 & 15 March 2023 - Sudhir Chepeni, Director Products and Technology at Akamai.
01h 01mApisecure, 14 & 15 March 2023 - Jeremy Ventura, CISO at ThreatX.
43mApisecure, 14 & 15 March 2023 - Brian Joe, Co-Founder, Product at Impart Security.
31mAPI security
25mThe New API Vulnerability Frontier
48mAPI Security for Enterprises fireside chat