Apisecure, 14 & 15 March 2023 - Sudhir Chepeni, Director Products and Technology at Akamai.
summary
Akamai data shows 6 billion web attacks per quarter and analysts report 80% of organizations building public-facing APIs, so API volume and risk are exploding. Attacks shift from blunt DDoS to slow, business‑logic abuse, bots and chained API probes. Effective defense requires full lifecycle tooling: continuous discover detect protect (API inventory and profiling), CI/CD checks and SBOMs, runtime WAF/rate‑limiting plus ML behavior detection, and automated Slack/Jira alerts that turn runtime blocks into developer remediation tasks.
AI-written summary · about
chapters (17)
- 0:00Introduction
- 0:24Speaker intro & API security overview
- 1:05Why API security matters
- 4:35Scale of API security problem
- 7:04API security isn't one-time
- 10:52API architecture & types
- 13:20API growth & deployment challenges
- 14:44Dev vs security perspectives
- 16:32Secure APIs from start
- 18:16API attack evolution
- 21:47Top API attack vectors
- 25:59API security solutions & frameworks
- 29:54Dev vs runtime roles
- 32:00Full lifecycle API security
- 36:15Discover detect protect
- 37:20Need for continuous observability
- 38:01Q&A
related talks
20mFrom Chaos to Calm: Navigating Emerging API Security Challenges.
16mMastering API Management and Security
42mThe Secret Life of APIs: Latest Attack Data Shows What Your APIs Are Doing
33mSpotlight On Latest Web Application and API Attack Data
42mAPI Security: Code-to-Cloud Context for Complete Protection
24mSecurity in 2023 and Beyond: Automation, Analytics and Architecture
25mSecuring your APIs at Scale
31mAPI security