How To Mitigate OWASP API Security Top 10 Vulnerabilities in Layer7 API Gateway: Lack of Resources & Rate Limiting

Article By: Eunice Mushawatu The API Security project focuses on strategies and solutions to understand and mitigate the unique vulnerabilities and security risks of APIs. The Top Ten security threats include:1. Broken Object Level Authorization2. Broken Authentication3. Excessive Data Exposure4. Lack of resources and Rate Limiting5. Broken Function Level Authorization6. Mass Assignment7. Security Misconfigurations8. Injection9.

December 21, 2020

How to Mitigate OWASP API Security Top 10 Vulnerabilities in Layer7 API Gateway: Broken Function Level Authorization

Article By: Eunice Mushawatu The API Security project focuses on strategies and solutions to understand and mitigate the unique vulnerabilities and security risks of APIs. The Top Ten security threats include1. Broken Object Level Authorization2. Broken Authentication3. Excessive Data Exposure4. Lack of resources and Rate Limiting5. Broken Function Level Authorization6. Mass Assignment7. Security Misconfigurations8. Injection9.

December 21, 2020

How To Configure Layer7 API Gateway for Symantec Siteminder Integration

Article By: Eunice Mushawatu Symantec Siteminder is one of the most effective methods of better protecting APIs against unauthorized access. Siteminder protects URLs, and APIs endpoints are exactly that – URLs. This guide is designed to detail how to set up and configure the integration with Siteminder and build a policy that uses Siteminder to

December 21, 2020

How To Get Layer7 API Gateway FIPS Compliant

Article By: Eunice Mushawatu The Federal Information Processing Standard (FIPS) Publication 140-2 is a U.S. government standard that defines minimum security requirements for cryptographic modules in information technology products, as defined in Section 5131 of the Information Technology Management Reform Act of 1996. The layer7 API gateway appliances as of version 10, do not allow

December 21, 2020

A Beginner’s Guide to Layer7 API Gateway Policy Writing

Article By: Eunice Mushawatu Your organization has acquired the Layer7 API gateway, and you are ready to take advantage of its capabilities to improve your API management and protect your APIs. Below, we’ve put together a comprehensive guide to layer7 API gateway policy writing for the complete beginner, which walks through the basic concepts of

December 21, 2020

How To Mitigate OWASP API Security Top 10 Vulnerabilities in Layer7 API Gateway: Injection

Article By: Eunice Mushawatu The API Security project focuses on strategies and solutions to understand and mitigate the unique vulnerabilities and security risks of APIs. The Top Ten security threats include:  Broken Object Level Authorization Broken Authentication Excessive Data Exposure Lack of resources and Rate Limiting Broken Function Level Authorization Mass Assignment Security Misconfigurations Injection

November 30, 2020

How To Mitigate OWASP API Security Top 10 Vulnerabilities in Layer7 API Gateway: Excessive Data Exposure

Article By: Eunice Mushawatu The API Security project focuses on strategies and solutions to understand and mitigate the unique vulnerabilities and security risks of APIs. The Top Ten security threats include  Broken Object Level Authorization Broken Authentication Excessive Data Exposure Lack of resources and Rate Limiting Broken Function Level Authorization Mass Assignment Security Misconfigurations Injection

November 29, 2020

How To Configure Mutual SSL or Certificate Based Authentication in the Layer7 API Gateway

Article By: Eunice Mushawatu The most common use-case for Mutual SSL is when there is a need to verify the identity of both a client and the server to establish a secure and encrypted client-server communication tunnel. In the traditional use of SSL i.e. when accessing https resources, only the client verifies the server’s certificate,

November 19, 2020