From Chaos to Calm: Navigating Emerging API Security Challenges.
summary
Akamai data shows it handles 15–30% of daily Internet traffic and finds commerce APIs account for roughly 50% of attacks while EMEA has the highest API-attack ratio; one incident steals about $100,000 in 24 hours by chaining two endpoints that leak a UUID and then a driver’s access token. Concrete mitigations include rate limiting, a WAF deployed in block mode, bot management, API discovery to find zombie endpoints, data-labeling, behavioral baselining for business-logic abuse, and shifting security left into the SDLC.
AI-written summary · about
chapters (7)
- 0:00API security challenges
- 2:54APIs more vulnerable than apps
- 5:23API attack trends and stats
- 8:52API attack vectors explained
- 13:11Broken authorization and data exposure
- 15:39API security best practices
- 19:00Key takeaways
related talks
42mThe Secret Life of APIs: Latest Attack Data Shows What Your APIs Are Doing
49mApisecure, 14 & 15 March 2023 - Sudhir Chepeni, Director Products and Technology at Akamai.
16mMastering API Management and Security
01h 01mApisecure, 14 & 15 March 2023 - Jeremy Ventura, CISO at ThreatX.
33mSpotlight On Latest Web Application and API Attack Data
42mAPI Security: Code-to-Cloud Context for Complete Protection
22mLayered Approach of API Security Strategies and its Business Impact
29mChasing Shadows: Securing APIs in a Digital Economy