Innovate and Integrate – Modernising API Security

Forum Systems | www.forumsys.com | 888.811.0060 | 199 Wells Ave., Suite 105, Newton, MA 02459

Innovate and IntegrateModernising API Security

Jason Macy, Chief Technology Officer

Discussion Points

• What is an API

• Data externalization and modernization

• Anatomy of API (information border) security

• Secure agility via architecture design

What is an API?

The ServiceMobile, B2B, Portal, Data …

(HTML, XML, SOAP, REST, JSON, …)

API is the access point (interface) to the service or data

APIs are Everywhere

APIsThe Integration Point of Innovation

Externalization Modernization

Cloud | Web ApplicationsExposed and consumed via standards-based technology for rapid integration and adoption

Mobile| AppsUse web services for calls to back-end servers delivering data and logic

Big Data| AnalysisBig data analytic engines expose and monetize results via APIs

Portals| UsersPersonalized experience, seamless and unified access to information resources

Externalization and Modernization

Open new channelsAnd new revenue

Deliver Integration and Service Maintain Security

Services and AssetsClients and Consumers

CreateConsumeInternal APIs

External APIs

• Integrate• Subscribe• Invoke

• Promote• Monitor• Secure

The Agility of API Abstraction

Mobile Device

Web Portal

B2B Partner

Cloud App

Web Site

Sat Link

Company Assets and Services

Anatomy of Modern API Security

Threat Mitigation• Content-Aware (SOAP, REST, …)• Intrusion Detection and Prevention• Data Leakage • Embedded Malware

Transport Security• SSL/TLS• IP, Port, URL

Data Privacy• Content Encryption• Content Decryption

Attribute Based Access Control• Subject, Object, Environment

Role-Based Access Control• AuthN, AuthZ

Integrity and Trust • Digital Signature• Signature Verification• Schema Validation

Agile API Security – Decouple from Service

API Security Gateway

Role-Based Access Control

Threat Mitigation

Transport Security

Attribute-Based Access Control

Data Privacy

Integrity and Trust The Service

Mobile, B2B, Portal, Data …(HTML, XML, SOAP, REST, JSON, …)

Modernise the IT Security Architecture

SOAVirtual ESBApps Portals

Endpoint Services and Data

Firewall

Mobile B2B Cloud / 3rd PartyBrowsers

Legacy IT Security Architecture

Firewall

SOAVirtual ESBApps Portals

Internet / DMZ boundary DMZ / Extranet boundary DMZ / Intranet boundary Extranet / Intranet boundary Intranet / internal-enclave boundary

SECURITY• Protocol-Break Security• Deep Content-Inspection• Data Validation• Threat Analysis• Antivirus Scanning• Accelerated Cryptography

Endpoint Services and Data

IDENTITY• ABAC, RBAC, CBAC• SSO• Integrated SAML & OAuth

Mobile B2B Cloud / 3rd PartyBrowsers

The API Gateway Modern Architecture

Combining Security with Identity

ABAC, RBAC, CBAC

API Gateway – Centralized ABAC, RBAC, CBAC

Virtual

Portals

Publish APIs for Consumption

Content Inspection (CBAC)SOAP, XML, REST, JSON, HTML, URL

client

Virtual API(Protocol break)

Virtual

Portals

Virtual

Portals

client

ID Authentication, Authorization (Role-Based Access Control)OAuth, SAML, WS-Tokens, HTTP Form Post, HTTP Basic, HTTP Digest, NTLM, Kerberos, X509 Mutual, RSA SecureID

client

EnvironmentConditions

Subject Attributes

Object Attributes

Attribute Analysis (ABAC)

Virtual

Portals

ID Authentication, Authorization (Role-Based Access Control)OAuth, SAML, WS-Tokens, HTTP Form Post, HTTP Basic, HTTP Digest, NTLM, Kerberos, X509 Mutual, RSA SecureID

client

EnvironmentConditions

Subject Attributes

Object Attributes

Attribute Analysis (ABAC)

Virtual

Portals

Broker client request

Authorization (Response RBAC)• Correlate inbound identity with response information• Allow, Filter, or Reject

Deep Content Inspection (Response CBAC)• SOAP, XML, REST, JSON, HTML, URL

client

API Gateway – Centralized RBAC + CBAC + SSO

Virtual

Portals

Broker service response

Key Considerations

API Security Gateway – Key Considerations

Build vs Buy• Remove complexities of interoperability and leverage

purpose-built industry proven security over home-grown coded solutions

Flexible form factors• Virtual and physical to support deployment in any

computing environment

No Code SAML and OAuth• Legacy and modern system enablement of SAML and

OAuth SSO without writing a single line of code

API Security Gateway – Key Considerations

Vendor Agnostic• Enables technology choices that improve agility, rather

than stifle it

Standard-Based• Out of the box support for all modern industry protocol

and messaging standards (SOAP, XML, JSON, etc)

Edge Facing• API Security Gateway built on secure architecture

enables Tier 0 deployment to unify identity with security

Thank You

More Info:www.forumsys.com

Innovate and Integrate – Modernising API Security

Technology

Transcript of Innovate and Integrate – Modernising API Security

Innovate Integrate Transform - altencalsoftlabs.com Fusion HCM –R9. ALTEN Calsoft Labs is a next gen and provider. The company enables clients innovate, integrate, and transform

Modernising Medical Careers

Innovate and Integrate Panel Session

Philippe Ruffio Modernising Universities

Innovate. Integrate. Inspire. · Innovate. Integrate. Inspire. HealthShare NSW & eHealth NSW Expo is a key event on the Health calendar attended by almost 2,000 decision makers,

MODERNISING GOVERNMENT, MODERNISING ICT MANAGEMENT · 2 Public sector management ... 2.7 Shared services ... MODERNISING GOVERNMENT, MODERNISING ICT MANAGEMENT Information.

Imagine Innovate Integrate Future of Mouse Embryo Transfer ... · Future of Mouse Embryo Transfer: Achieving the 3Rs with the NSET device Imagine • Innovate • Integrate Presented

TEDx at Your School: Innovate and Integrate

Innovation Modernising Rural Economy

Innovate Integrate Transform - ALTEN Calsoft Labs Fusion...CASE STUDY Oracle Fusion HCM Implementation for Manufacturing Industry Innovate Integrate Transform Engagement Length Months

ERASMUS & MODERNISING HE

Agile and Open C4ISR Systems - Helping the Military Integrate, Innovate and Secure Networks Across the Enterprise

Vikas Arora - Microsoft Bing Maps - Locate. Integrate. Innovate. - Geomob May 2011

Innovate, Integrate, Motivate€¦ · Innovate, Integrate, Motivate 2018 MICHIGAN ORAL HEALTH CONFERENCE MAY 17–18, 2018 ... 9:45 to 10:45 a.m. Keynote Session: A Time for Innovation:

Innovate Integrate Transform - Altencalsoft Fusion HCM...Oracle Fusion HCM – R10. ALTEN Calsoft Labs is a next gen and provider. The company enables clients innovate, integrate,

Modernising Ausgrid’s Operational Control System...management of the network, including intelligent field crew dispatch. It is a platform to integrate core, ancillary network and

eTransform Africa: Modernising Government through ICTssiteresources.worldbank.org/EXTINFORMATIONANDCOMMUNICATION… · eTransform Africa: Modernising Government through ICTs List

Leading Transformation - FinPro · The Conference theme is ‘Leading Transformation – Innovate, Integrate, Motivate’ whether they be transformative ideas, improvements, processes,

Modernising Mental Health

Brand USA - U.S. Travel's ESTO | Innovate. Integrate. … • Chicago Northwest • Chicago's North Shore • CVB (ILC) • Chickasaw Nation • Choice Hotels International • Choose