Ping Identity, the provider of Identity Defined Security, announced the general availability of PingIntelligence for APIs, following its acquisition of Elastic Beam. The AI-powered solution is part of the Ping identity platform and brings an increased level of intelligence into how APIs are accessed and used to protect API infrastructures from cyberattacks, while also delivering deep insight into API activities.
“APIs are proliferating throughout all organisations faster than security teams can keep up with them. While APIs benefit digital transformation initiatives, they also are the gateway to everything of value and that has made them a major target for cyber-attacks,” explained Bernard Harguindeguy, SVP, Intelligence at Ping Identity. “PingIntelligence for APIs allows security and DevOps teams to monitor API infrastructures for new APIs, provides audit trails of API traffic, and automatically blocks identified cyberattacks that target data and systems behind the APIs.”
Preventing API data breaches
The availability of PingIntelligence for APIs help organisations challenged by emerging trends within the API landscape, including:
Industry directives such as PSD2, Open Banking and FHIR/HL7 have accelerated the use of APIs to drive interoperability between organisations
Industry directives such as PSD2, Open Banking and FHIR/HL7 have accelerated the use of APIs to drive interoperability between organisations in similar industries. As a result, APIs have become a new and growing security risk for all organisations by making it easier for hackers and others to reach into applications and data they expose. According to Gartner, “API abuses will be the most-frequent attack vector resulting in data breaches for enterprise web applications by 2022.”
Demands from enterprises for rapid API integration projects force security teams to build unique policies for each API. This introduces significant complexity and overhead costs, while also hampering the delivery timelines. According to the Cloud Elements State of API Integration 2018 Report, more than 50% of net new API integrations are built in under 30 days.
No network reconfigurations required
PingIntelligence for APIs is offered via inline and sideband deployment options available for a range of production environments. The sideband option allows the solution to be “dropped in” into existing API Gateway and/or PingAccess deployments with no network reconfigurations.