{"id":10945,"date":"2021-09-16T07:00:00","date_gmt":"2021-09-16T15:00:00","guid":{"rendered":"https:\/\/formtek.com\/blog\/?p=10945"},"modified":"2021-05-19T08:30:35","modified_gmt":"2021-05-19T16:30:35","slug":"api-security-a-security-weak-link-in-digital-transformation","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/api-security-a-security-weak-link-in-digital-transformation\/","title":{"rendered":"API Security: A Security Weak Link in Digital Transformation"},"content":{"rendered":"\n

APIs are the heart of digital transformation strategies, but they can easily become the weak link in a security strategy. APIs are often customer facing and thus readily available and can be exploited to expose business logic and sensitive data. Hacking APIs can lead to a data breach. A study by Micro Focus Fortify<\/a> found that 35 percent of Web applications and 52 percent of mobile applications had issues with API security and abuse.<\/p>\n\n\n\n

Michael Isbitski<\/a>, a technical evangelist at API security specialist Salt Security, said that<\/a> \u201cwe are absolutely seeing more API security incidents of late. Applications today are built on APIs, and you can draw a straight line from digital transformation to APIs.\u201d<\/p>\n\n\n\n

A survey by Imvision found that less than 35 percent of companies test their APIs for security issues at least monthly.<\/p>\n\n\n\n

\"\"<\/a>
from: Industry Survey: Enterprise API Security | 2021 by Imvision<\/a><\/figcaption><\/figure><\/div>\n\n\n\n

John Morello<\/a>, Palo Alto Networks Vice President of Product\u00a0, said that<\/a> “the API is often times a thing that attackers will try to target more simply because it\u2019s been designed explicitly to be programmatically accessible. The API mostly presents a more interesting kind of attack surface for somebody to go and probe and figure out what else it could be made to do, in addition to what it was intended to do. Since microservices and decomposed applications are really the direction you see many organizations running in, where those individual components are being explicitly designed to work together over the network, and thus are exposing more of their kind of internal mechanics over the network. It allows somebody who\u2019s an attacker or somebody who has ill intent to really have a much wider range of endpoints, and they can probe a lot more things.\u201d<\/p>\n

\"Digg<\/a><\/div>
\"Reddit<\/a><\/div>
\"Stumble<\/a><\/div>
\"Buzz<\/a><\/div>
\"Vote<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Kick<\/a><\/div>
\"Shout<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Post<\/a><\/div>
\"Google<\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"

APIs are the heart of digital transformation strategies, but they can easily become the weak link in a security strategy. APIs are often customer facing and thus readily available and can be exploited to expose business logic and sensitive data.…<\/span><\/p>\n

Read more ›<\/a><\/div>\n

<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-10945","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/10945","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=10945"}],"version-history":[{"count":1,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/10945\/revisions"}],"predecessor-version":[{"id":10947,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/10945\/revisions\/10947"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=10945"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=10945"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=10945"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}