Security News > 2021 > November > API sprawl: A threat you might want to address later, but you can’t ignore it

API sprawl: A threat you might want to address later, but you can’t ignore it
2021-11-09 06:00

Continuous software development results in the frequent release of new API versions.

API sprawl introduces significant operational and security challenges.

External APIs must be validated continuously for trust, and internal API keys can be compromised, giving attackers access to critical infrastructure.

Solutions like API gateways, ingress controllers, and sidecar proxies can enable highly effective management of intra-cluster API architectures, but they are insufficient for managing inter-cluster API sprawl.

To solve API sprawl across multiple clusters, enterprises require a single source of truth that tracks all APIs, seamless API discovery, proper versioning and documentation, API-to-API connectivity, and uniform monitoring of API reliability.

With APIs opening up so many new threat vectors, enterprises need to recognize the risk they pose, and make trust a metric for third parties accessing their APIs.


News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/F0oNiqpaAfg/