api-security-icon  API Security


Next Generation API Security


API-Security
API Security is critical for an accelerating API Economy where devices, cloud services and all enterprise processes and data are exposed as API services. API Security has become a critical aspect of producing and consuming APIs.

API Security has been recognized by OWASP Top 10 as a significant exposure that should be addressed while deploying APIs.

Unprotected APIs as shown from OWASP Top 10 2017 RC 1 below rightfully promotes API Security as a vital aspect of application security.


Understanding API Security Vulnerabilities and Remediation Strategies


Security Vulnerabilities and their remediation strategies are clearly delineated in OWASP Top 10 2017 RC1

OWASP A10The key aspects of protecting APIs include:


Forum Sentry Built-in API Security Engine


 

Forum Systems Divider

Built-in Forum Sentry API Security Features
API Cybersecurity ProtectionContent-Aware Threats (XML, JSON, …)Intrusion Detection and Prevention

Data Leakage Prevention

Integrated Antivirus and BASE64 scanning

API Access Control

Authentication and Authorization

Multi-Context Access Control

Role-Based Access Control

Attribute-Based Access Control

Content Based Access Control

API Accelerated Cryptography

SSL/TLS Termination and Initiation

Digital Signatures and Encryption

Centralized PKI Key Management

API Data conversionContent Encryption and DecryptionTransformation

Data mapping

Protocol conversion

API Rate and Size Throttling

User-based service level assurance

Application throughput DOS protection

Monitoring and Alerts

API Real-time Monitoring

Real-time view of traffic and events

Alert Management

Analytics

  • Forum Systems Divider

    Forum Sentry API Security Gateway

    sentry-secured

    checkbox FIPS 140-2 and NDPP Secure OS and Architecture

    checkbox Over 100 built-in messaging standards

    checkbox Built-in Identity, Security, and Integration

    checkbox Built-in Monitoring and Analytics

    checkbox Built-in Cloud Brokering

    checkbox Built-in policy automation and auto-provisioning