API Security Survey Reveals Most Companies Not Yet Using API-Specific Controls
Wednesday, July 26, 2023
Survey Reveals Phishing, Missing Patches Are Top Concerns
CAMBRIDGE, Mass., July 18, 2023 /PRNewswire/ -- Akamai Technologies, Inc. (NASDAQ: AKAM), the cloud company that powers and protects life online, today released the results of a new survey of application security professionals on what they view as the top security risks related to Application Programming Interfaces (APIs).
The 2023 SANS Survey on API Security found that less than 50 percent of respondents have API security testing tools in place. Even fewer have API discovery tools (29 percent). What's more, the report finds that taking advantage of API security controls that are included in DDoS and load balancing services is "an underutilized area." Just 29 percent of respondents reported using these features.
Akamai partnered with the SANS Institute on the survey which was conducted in the first quarter of 2023 to determine enterprise awareness, readiness and future plans for dealing with API security risks. The 231 global respondents were primarily application security professionals.
Modern applications increasingly use APIs to capture business processes and break them into the communications required to efficiently enable business partners and customers to work with an organization. A recent State of the Internet report by Akamai noted that 2022 was a record breaking year for application and API attacks.
Survey participants ranked phishing (38.3 percent) and missing patches (24 percent) as the top two API security concerns. These were followed by exploitation of vulnerable applications/APIs (12 percent) and accidental disclosure of sensitive information (9.1 percent).
Other key findings of the survey include:
-- 62 percent of respondents are using web application firewalls as part of
API risk mitigation.
-- Most (57.1 percent) respondents reported API inventory accuracy of
between 25 percent and 75 percent.
-- Most respondents cited the OWASP (Open Web Application Security Project)
Application Security and API Top Ten lists, and the MITRE ATT&CK
Framework as the basis for defining application and API risk.
-- 76 percent of survey takers reported training development staff on
application security.
"This new survey offers the industry perspective on a topic which will continue to be one of the top security issues of 2023 and beyond," said Rupesh Chokshi, Senior Vice President and General Manager, Application Security at Akamai. "The results show enterprises need to place more focus on both where and how many APIs are running, because vulnerable APIs are becoming the most common access point for attacks."
"The key takeaways of this survey are that security hygiene controls like strong authentication, asset inventory, vulnerability management and change control need to address API security issues," said John Pescatore, Director of Emerging Security Trends with SANS. "Prevention and detection need to be upgraded to deal with API-centric attacks, and infrastructure services (such as content delivery networks and denial of service filtering) need to be put to work, as well."
A webinar with more details on the survey will feature John Pescatore and Akamai VP Alka Malik. The event is scheduled for July 18 at 10:30am ET and those interested can sign up here. The webinar will also spotlight several Akamai customers and include discussions around how organizations currently discover APIs in use and how to mitigate the risks posed by these vulnerabilities.
About Akamai
Akamai powers and protects life online. Leading companies worldwide choose Akamai to build, deliver, and secure their digital experiences -- helping billions of people live, work, and play every day. Akamai Connected Cloud, a massively distributed edge and cloud platform, puts apps and experiences closer to users and keeps threats farther away. Learn more about Akamai's security, compute, and delivery solutions at akamai.com and akamai.com/blog, or follow Akamai Technologies on Twitter and LinkedIn.
Contacts
Jim Lubinskas
Akamai Media Relations
703.907.9103
jlubinsk@akamai.com
View original content to download multimedia:https://www.prnewswire.com/news-releases/api-security-survey-reveals-most-companies-not-yet-using-api-specific-controls-301879396.html
SOURCE Akamai Technologies, Inc.
|
|
|
|
|
 |
Indusface redefines WAAP user experience with industry-first innovations in AppTrana | Mar 28, 2025
|
|
EXECUTIVE PRODUCER BRADLEY COOPER'S FILM CAREGIVING TO PREMIERE ON PBS FOR NATIONWIDE BROADCAST JUNE 24 STREAMING BEGINS MAY 27 | Mar 28, 2025
|
|
Trend Micro Launches Voice-Enabled ScamCheck Capability to Help Protect Consumers from the Rising Threat of Global Scams | Mar 28, 2025
|
|
Splitit Unveils First Fully Embedded White-Label Installment Solution for Shopify Merchants | Mar 28, 2025
|
|
/C O R R E C T I O N -- Bell Canada (MTL)/ | Mar 28, 2025
|
|
Keeper Security Unveils Latest WearOS App for Seamless Password Management | Mar 28, 2025
|
|
Leading Endpoint Protection Solutions for Combatting Cyberthreats Identified in Info-Tech Research Group's New Emotional Footprint Report | Mar 28, 2025
|
|
Hornetsecurity named Top Player in Radicati's Secure Email - Market Quadrant 2025 | Mar 28, 2025
|
|
Ontinue Research Reveals Ransomware Attacks Surged 132% Despite 35% Drop in Payments | Mar 28, 2025
|
|
Identity Theft After a Data Breach? Legal Action May Recover Your Losses | Console & Associates | Mar 28, 2025
|
|
|
