APIs are an open attack vector for an organization's network and data. Here are some best practices to secure APIs and test them more thoroughly.
Ross Moore is the Cyber Security Support Analyst with Passageways. He was Co-lead on SOC 2 Type 1 implementation and Lead on SOC 2 Type 2 implementation, facilitated the company’s BCP/DR TTX, and is a HIPAA Security Officer. Over the course of his 20 year IT career, Ross has served in a variety of operations and infosec roles for companies in the manufacturing, healthcare, real estate, business insurance, and technology sectors. He holds (ISC)2’s SSCP and CompTIA’s Security + certifications, a B.S. in Cyber Security and Information Assurance from WGU, and a B.A. in Bible/Counseling from Johnson University. He is also a regular writer at Bora.
All Stories by Ross Moore
In the first half of 2021, API attacks had increased by 348%. With the proliferation of APIs, we have every reason to plan for an increase in the number and complexity of attacks. This questioning to API security provides lines of inquiry that lead to a better understanding of how APIs fit into security and business.