As software applications become more accessible through APIs, the available surface area increases for hijackers to attack and compromise your data. We see an upward trend of malicious assaults and denial-of-service attacks targeted at enterprise applications, exploiting vulnerable APIs. This session will discuss potential vulnerabilities with APIs and the different attack vectors that hackers might use to compromise your APIs. To help prepare you, we will also discuss strategies and best practices to secure your APIs from these threats. The session will provide an overview of the following: Common API security hacks and threats Best practices to secure your APIs against these threats such as: Detection and prevention of Denial of Service (DoS) attacks Malformed messages or excessive XML/JSON depth and breadth Message Encryption and rate limiting Development and governance methodologies that needs to be adopted to ensure security compliance.