API Security & Performance for Gaming
summary
Cloudflare reports it proxies about 20 percent of proxied internet traffic and sees APIs as 54 percent of requests with ~20 percent growth over 10 months, so protect them with a four‑step funnel: absorb DDoS at a global network of ~250 data centers, map endpoints with API discovery, validate requests using a positive security model (OpenAPI/schema) and deploy auth like mutual TLS plus rate controls that count per session id or user rather than IP to stop botnets and stale API versions.
AI-written summary · about
chapters (7)
- 0:00Start
- 5:17Mitigation approach: incremental noise removal
- 6:53Volumetric Protection
- 9:07Protect your attack surface area
- 12:10Example - Strong authentication with mutual TLS
- 14:54Example - Request validation using schema
- 15:40Control load and rate of requests
related talks
01h 01mApisecure, 14 & 15 March 2023 - Jeremy Ventura, CISO at ThreatX.
54mFive-step plan for securing your APIs
20mFrom Chaos to Calm: Navigating Emerging API Security Challenges.
42mAPI Security: Code-to-Cloud Context for Complete Protection
25mAPI Security Deep Dive: Safeguard Your Digital Assets
15mSession: Securing The Gaming Ecosystem From Development To Distribution
51mThe Next Application Security Frontier: AI-Ready API Defense
32mApisecure, 14 & 15 March 2023 - Shannon Wilkinson, Cybersecurity Founder | Women in Technology [...]
