MythBusters API Edition – IAM, API gateways, and WAFs are enough

APIs are at the heart of any business regardless of industry, and APIs are increasing in both volume and capabilities. Attackers realize the vital role APIs have in connecting critical data and services for organizations, making them a prime attack vector. Old ways of thinking about API security must change too.

This video series busts common industry myths surrounding API security and cuts through the fluff of security industry trends that may actually be impeding your API security strategy.

In this episode, we cover the traditional tools of the trade with respect to API security, Identity and Access Management, API gateways, and WAFs. Authentication and authorization are critical for any API, but is it enough to protect your organization’s APIs? And why do API gateways and WAFs fail to catch many forms of API attacks?