API Security: Assume Possible Interference

  1. Moscone South

APIs must be de designed with systems and unpredictable interactions in mind, including failure modes. What happens when other dependent services or layers of the stack fail? What information is being fed back inadvertently? Expecting the unpredictable to happen, adapting dynamically, and being precise in intentions throughout can go a long way towards secure-by-design.

Download pdf