Tyk raises $35M for its open-source, open-ended approach to enterprise API management

APIs are the grease turning the gears and wheels for many organizations’ IT systems today, but as APIs grow in number and use, tracking how they work (or don’t work) together can become complex and potentially critical if something goes awry. Now, a startup that has built an innovative way to help with this is […] Continue reading Tyk raises $35M for its open-source, open-ended approach to enterprise API management

How to prevent horizontal escalation attacks when a centralized authorization service as gateway is used?

Say I have a gateway which provides authorization mechanisms by validating a JWT, behind an api-gateway there are different micro-services but only the gateway port is public. As a software designer you decide to make all micro services un… Continue reading How to prevent horizontal escalation attacks when a centralized authorization service as gateway is used?

Imperva is a Leader in the Forrester Wave: Web Application Firewalls, Q1

Web application firewalls continue to be a core technology function for securing critical assets, and for IT professionals, market analyst reports and validation are critical when deciding upon new WAF solutions. That’s why we’re proud to s… Continue reading Imperva is a Leader in the Forrester Wave: Web Application Firewalls, Q1

Application layer DDOS attack detection – enough to analyse only GET/POST requests?

I am developing a DOS attack recognition module for application layer requests.
The application has a backend consisting several APIs. They all are connected through an API gateway(developed in Node Js). Every request is recorded to a data… Continue reading Application layer DDOS attack detection – enough to analyse only GET/POST requests?