Policy enforcement by harvesting from an open api

A method of building connectors that trigger protective actions during API calls including:

• parsing an OpenAPI specification to identify resources and extract attributes of API resources usable to build a connector or an application signature, including attributes of core activities that trigger protective actions;
• wherein the OpenAPI specification describes an interface to an API of a service, which allows a computer to understand the capabilities of the service without looking at source code or documentation of the service, and without inspecting traffic of the service;
• applying a connector creator that performs actions to generate connector rules or application signatures, the actions including accessing a template for creating application signatures or connector rules that recognize intercepted API calls;
• and
• using the attributes with the template to produce the connector rules, thereby automating building the connectors or application signatures.

A tangible non-transitory computer readable storage medium, including program instructions loaded into memory that, when executed on processors, cause the processors to implement a method of building connectors that trigger protective actions during API calls, including:

• parsing an OpenAPI specification to identify resources and extract attributes of API resources usable to build a connector or an application signature, including attributes of core activities that trigger protective actions;
• wherein the OpenAPI specification describes an interface to an API of a service, which allows a computer to understand the capabilities of the service without looking at source code or documentation of the service, and without inspecting traffic of the service;
• applying a connector creator that performs actions to generate connector rules or application signatures, the actions including accessing a template for creating application signatures or connector rules that recognize intercepted API calls;
• and
• using the attributes with the template to produce the connector rules, thereby automating building the connectors or application signatures.

A device including a processor, memory coupled to the processor, and computer instructions loaded into the memory that, when executed, cause the processor to implement a process of building connectors that trigger protective actions during API calls that includes:

• parsing an OpenAPI specification to identify resources and extract attributes of API resources usable to build a connector or an application signature, including attributes of core activities that trigger protective actions;
• wherein the OpenAPI specification describes an interface to an API of a service, which allows a computer to understand the capabilities of the service without looking at source code or documentation of the service, and without inspecting traffic of the service;
• applying a connector creator that performs actions to generate connector rules or application signatures, the actions including accessing a template for creating application signatures or connector rules that recognize intercepted API calls;
• and
• using the attributes with the template to produce the connector rules, thereby automating building the connectors or application signatures.