API MythBusters Chalk Talk: IAM, Gateways, and WAFs

APIs are the foundation of our digital world, and organizations are building and integrating APIs at an accelerating rate. Attackers know the vital role APIs have in connecting critical data and services, which in turn makes APIs a primary attack vector. Old ways of thinking about API security must change in the face of this reality.

This video series uses visual and illustrative techniques to debunk common industry myths surrounding API security, cut through the fluff of security industry trends, and guide you in your API security strategy.

In this episode, we cover the use of API gateways and web application firewalls (WAF) to protect APIs. Access control with strong authentication and authorization are critical for any API, but is that approach enough to protect your organization’s APIs? And why do API gateways and WAFs fail to catch many API attacks? We address the current state of message filtering and threat protection and explain why your organization needs more.