Method and system for enhancing computer network security

An Application Programming Interface (API) gateway for enhancing computer network security, the API gateway comprising:

• a processor;
• and
• a memory communicatively coupled to the processor, wherein the memory stores processor-executable instructions, which, on execution, cause the processor to:
• receive a plurality of requests from a plurality of client devices to avail a plurality of responses from a plurality of services running on one or more servers, wherein each of the plurality of requests comprises a Uniform Resource Locator (URL) for a corresponding service and a set of request parameters, and wherein each of the plurality of responses comprises a set of response parameters;
• determine a URL pattern for each of the plurality of requests, based on the URL associated with that request;
• determine a request data signature for each of the plurality of requests based on the respective set of request parameters associated with each of the plurality of requests and a response data signature for each of the plurality of responses based on the respective set of response parameters associated with each of the plurality of responses, using a first machine learning model, wherein the first machine learning model learns to determine the data signature for a request and for a response over a predefined period of time and until a predefined percentage accuracy is attained;
• and
• determine an authenticity of each of the plurality of requests based on the respective URL pattern and the respective data signature associated with each of the plurality of requests and an authenticity of each of the plurality of responses based on the respective data signature associated with each of the plurality of responses, wherein the authenticity is indicative of a potential security vulnerability.

A non-transitory computer-readable medium storing computer-executable instructions for enhancing computer network security, the computer-executable instructions configured for:

• receiving a plurality of requests from a plurality of client devices to avail a plurality of responses from a plurality of services running on one or more servers, wherein each of the plurality of requests comprises a Uniform Resource Locator (URL) for a corresponding service and a set of request parameters, and wherein each of the plurality of responses comprises a set of response parameters;
• determining a URL pattern for each of the plurality of requests, based on the URL associated with that request;
• determining a request data signature for each of the plurality of requests based on the respective set of request parameters associated with each of the plurality of requests and a response data signature for each of the plurality of responses based on the respective set of response parameters associated with each of the plurality of responses, using a first machine learning model, wherein the first machine learning model learns to determine the data signature for a request and for a response over a predefined period of time and until a predefined percentage accuracy is attained;
• and
• determining an authenticity of each of the plurality of requests based on the respective URL pattern and the respective data signature associated with each of the plurality of requests and an authenticity of each of the plurality of responses based on the respective data signature associated with each of the plurality of responses, wherein the authenticity is indicative of a potential security vulnerability.