Securing API Using API Gateway

Abstract

Like traditional local APIs, web service APIs (web APIs for short) evolve, bringing new and improved functionality as well as insecurities. The Application Programming Interface (API) may be longstanding theory but it’s the one that is going through transformations. Enterprises have a decent impact on the line, including reputation, guideline and the concurrent needs of partners, customers, shareholders, and employees. As driven by cloud and mobile hungers, everyday organizations are opening their information assets to external developers. API publishing must be dealt with excessive care by enterprises. In this paper, we report an approach to provide security to API to address this issue. We analyzed the three popular attack vectors which act as threat to APIs and carefully studied how API Gateway can be used to secure the existing APIs. Our findings are threefold: 1) We examine the major vulnerabilities in an API; 2) We identify the Security solution by the means of API Gateway; 3) We examine the different tools used for API Management, to give Web and IT managers and enterprise architects vital facts and figures for selecting an API Management solution.