Modifying authentication for an application programming interface
AssigneeShape Security, Inc.
InventorsJustin D. Call, Timothy D. Peacock
Life of this patent
Estimating the term…
Abstract
Application programming interfaces (APIs) can be unintentionally exposed and allow for potentially undesirable use of corporate resources. An API call filtering system configured to monitor API call requests received via an endpoint and API call responses received via a supporting service of an API or web service. The API call filtering system enables enterprises to improve their security posture by identifying, studying, reporting, and securing their APIs within their enterprise network.
Claims24
An application programming interface (API) call filtering system comprising one or more API wall devices, server devices, or client devices with memory comprising programmed instructions stored thereon and one or more processors configured to be capable of executing the stored programming instructions to:
- monitor one or more authentication methods of one or more API call requests received via one or more networks from an endpoint application and directed to an API service;
- receive a security action input in response to an output report generated based at least in part on authentication method information compiled based on the monitoring;
- modify one of the authentication methods of at least one subsequent API call request based on the received security action input to require that the at least one subsequent API call request satisfies an authentication test;
- and
- send the modified at least one subsequent API call request to the API service.
An application programming interface (API) wall device, comprising memory comprising programmed instructions stored thereon and one or more processors configured to be capable of executing the stored programmed instructions to:
- monitor one or more authentication methods of one or more API call requests received via one or more networks from an endpoint application and directed to an API service;
- receive a security action input in response to an output report generated based at least in part on authentication method information compiled based on the monitoring;
- modify one of the authentication methods of at least one subsequent API call request based on the received security action input to require that the at least one subsequent API call request satisfies an authentication test;
- and
- send the modified at least one subsequent API call request to the API service.
A network security method implemented by an application programming interface (API) call filtering system comprising one or more API wall devices, server devices, or client devices, the method comprising:
- monitoring one or more authentication methods of one or more API call requests received via one or more networks from an endpoint application and directed to an API service;
- receiving a security action input in response to an output report generated based at least in part on authentication method information compiled based on the monitoring;
- modifying one of the authentication methods of at least one subsequent API call request based on the received security action input to require that the at least one subsequent API call request satisfies an authentication test;
- and
- sending the modified at least one subsequent API call request to the API service.
A non-transitory computer readable medium having stored thereon instructions for application programming interface (API) call filtering comprising executable code that, when executed by one or more processors, causes the one or more processors to:
- monitor one or more authentication methods of one or more API call requests received via one or more networks from an endpoint application and directed to an API service;
- receive a security action input in response to an output report generated based at least in part on authentication method information compiled based on the monitoring;
- modify one of the authentication methods of at least one subsequent API call request based on the received security action input to require that the at least one subsequent API call request satisfies an authentication test;
- and
- send the modified at least one subsequent API call request to the API service.
Dependencies are inferred from the claim text.