As organizations increasingly rely on APIs to build a more responsive and richer user experience, it has also created a sprawling and ever growing attack surface. Originally intended for stateless machine-to-machine interactions, APIs have become an unwitting playground for malicious actors seeking to exploit vulnerabilities at scale. The sheer volume of API traffic, lack of standardization and the complexity of API-centric attacks pose a significant challenge for security teams striving to protect their infrastructure.

In this presentation, we’ll explore the limitations of traditional security controls and the need for specialized Detection and Response techniques using API logs. We’ll examine the key challenges of API security, including:
* Ingesting and analyzing high-volume API traffic
* Building the baseline of API traffic
* Identifying malicious patterns and outlier detection
* Implementing an effective incident response plan for API-born breaches
By the end of this talk, attendees will gain a deeper understanding of the complex threats targeting APIs and practical strategies for detecting and responding to these threats in their own environments. Whether you’re a seasoned security professional or a developer looking to harden your API security posture, this talk will provide actionable insights to help