The Next Application Security Frontier: AI-Ready API Defense
summary
APIs already dominate traffic and risk—92% of attacks target APIs on one provider—so expect exponential growth as Generative AI both magnifies attack volume and lets less-skilled actors act like pros; 10% of attackers cause 90% of damage. The workflow shown extracts mobile APKs with tools like APKLeaks or MobSF to recover keys, then uses bots and stolen creds to automate API abuse. F5’s stack (Wib + bot and DDoS controls) and LLM-driven telemetry aim to detect and block these chains, but governance across cloud and on‑prem remains required.
AI-written summary · about
chapters (13)
- 0:00AI-Ready API Defense intro
- 1:07Speaker backgrounds
- 2:53Complexity in modern IT
- 10:16APIs critical security concern
- 21:58API growth implications
- 27:23Speed of development gap
- 31:59Unique challenges in securing APIs versus web apps
- 36:19API security consolidation risks
- 39:48AI impact on attackers
- 42:14AI security past present future
- 45:27API governance attack surface
- 47:53Action steps for API AI security
- 49:18Q&A
related talks
03mAI vs AI to protect APIs
30mAttack API Architecture
25mThe New API Vulnerability Frontier
26mAPI and Application Security - The Future
12mSweet or Heat
01h 01mApisecure, 14 & 15 March 2023 - Jeremy Ventura, CISO at ThreatX.
24mDiscussion between Mehdi Medjaoui and Troy Leliard,API Security.
19mMastering API Management in the Gen AI Era: Do This Now!