The breadth of tools used to secure APIs and issues with collaboration across personas responsible for ensuring secure development, deployment, and operation of APIs may be creating more challenges than organizations realize.
Omdia view
Summary
The breadth of tools used to secure APIs and issues with collaboration across personas responsible for ensuring secure development, deployment, and operation of APIs may be creating more challenges than organizations realize.
Every API is a potential attack vector, and adversaries have a variety of avenues to compromise endpoints at their disposal.
Attacks on availability, exploitation of weak authentication, and the abuse of shadow APIs are all common and can easily lead to sensitive data loss. The breadth of tools used to secure APIs and issues with collaboration across personas responsible for ensuring secure development, deployment, and operation of APIs may be creating more challenges than organizations realize. Success requires security operations and tools spanning the software development process, from development to runtime, to help teams discover, manage, configure, monitor, and protect APIs. Leaders need to understand the behaviors that forward-thinking organizations have undertaken and how to properly assess solutions to secure APIs from development to runtime.
To gain insights into these trends, we surveyed 385 IT, cybersecurity, and application development professionals in North America (US and Canada) involved securing their organization’s APIs.
Research Report: API Security From Development to Runtime
Appendix
Further reading
Author
John Grady, Principal Analyst, Cybersecurity
Melinda Marks, Practice Director, Cybersecurity, Cybersecurity
