apidays LIVE LONDON - Open API Economy: Managing Security and Compliance Risks by Baljeet Malhotra
•
0 likes•46 views
apidays LIVE LONDON - The Road to Embedded Finance, Banking and Insurance with APIs Open API Economy: Managing Security and Compliance Risks Baljeet Malhotra, Founder & CEO at TeejLab Inc.
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to apidays LIVE LONDON - Open API Economy: Managing Security and Compliance Risks by Baljeet Malhotra
Similar to apidays LIVE LONDON - Open API Economy: Managing Security and Compliance Risks by Baljeet Malhotra (20)
More from apidays
More from apidays (20)
Recently uploaded
Recently uploaded (20)
apidays LIVE LONDON - Open API Economy: Managing Security and Compliance Risks by Baljeet Malhotra
- 1. API Discovery for API Economy Managing Security & Compliance Risks 28th October 2020 Baljeet Malhotra
- 2. About the Speaker and TeejLab ©2020 TeejLab Inc. All Rights Reserved. Baljeet Malhotra Founder & CEO • TeejLab provides API Discovery and Life Cycle Management Solutions • Former research director at SAP, and VP Research at Black Duck Software • Adjunct Professor at the Universities of British Columbia, Victoria and Northern British Columbia. Contact https://www.linkedin.com/in/baljeetmalhotra baljeet.malhotra@teejlab.com Phone: +1-604-365-1339
- 3. ©2020 TeejLab Inc. All Rights Reserved. Why API Discovery ?
- 4. ©2020 TeejLab Inc. All Rights Reserved. API Ecosystem – Recent Results Black Duck | 2020 Akamai | 2019 Gartner | 2021 Open Source in Apps Internet Traffic via APIs Attack Surface via APIs 96% 83% 90%
- 5. Ecosystem Snapshot ©2020 TeejLab Inc. All Rights Reserved. 50,000+ Public APIs 1,000,000+ Private APIs 69% of large companies have external APIs 350+ APIs on average used by large companies
- 6. ©2020 TeejLab Inc. All Rights Reserved. Open Source Software vs. APIs Growth of APIs (Top Vendors) Open Source and APIs 0 500 1000 1500 2000 2500 3000 3500 1998 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 Google Facebook Microsoft Amazon Salesforce 0 5000 10000 15000 20000 25000 30000 0 10000 20000 30000 40000 50000 60000 70000 1998 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 Open Source APIs
- 7. ©2020 TeejLab Inc. All Rights Reserved. API Growth in Enterprises
- 8. APIs – A Hidden Attack Surface ©2020 TeejLab Inc. All Rights Reserved. What is an API? Broken Authentications Service of Denial Attack Buffer Overflow SQL Injections Mass Assignments Cross-Site Scripting Sensitive Data Exposures How many 3rd party and or Open APIs do we have across all our applications? Security Head CSO/CTO/CIO
- 9. Why Technical Due Diligence: Managing Risks ©2020 TeejLab Inc. All Rights Reserved. Unsecured APIs: Data Breaches & Lawsuits Unreliable APIs: Disruption to Services & Profitability Noncompliant APIs: Loss of Intellectual Property & Reputation
- 10. ©2020 TeejLab Inc. All Rights Reserved. Some User Stories
- 11. ©2020 TeejLab Inc. All Rights Reserved. Did you use our legacy library?Nope. I used this Open Source, which already had Facebook & LinkedIn API integrations. I developed our Mobile ChatApp in just 5 days. Developers Coffee Chat Junior Developer Senior Developer
- 12. ©2020 TeejLab Inc. All Rights Reserved. Product Launch Delay What is an API? We really need to have a repository of pre-approved APIs. Yikesssss !! I can’t hit my Q3 targets. Launch of SaaSApp is delayed. I thought we all understood how important SaaSApp was for the US market. I checked reports. Our core pieces were ready, but our team couldn’t integrate location and payment APIs. VP BizDev Head NA Program Manager Sales Account Executive Product Owner
- 13. ©2020 TeejLab Inc. All Rights Reserved. Legal Head Monthly Meeting - Merger & Acquisition (M&A) On-Site Coordinator Technical Manager CTO Our CFO just told me that we are acquiring SaaS Inc. We need to conduct Technical Due Diligence by Q4. Q4 …that’s impossible !!Their SaaS Apps are 300M lines of codes. How we are going to discover and assess thousands of APIs they are consuming. 2 M&A Experts, 3 Developers, 2 Lawyers…
- 14. ©2020 TeejLab Inc. All Rights Reserved. Quarterly Meeting - Audit with Regulators Their EuroSaaS App has 30M registered users. I don’t see any disclosure of 3rd party APIs they are using. Technical Head General Counsel CIO GRC We just integrated SpeechRecognition API from SpeechAI Inc. I bet our team does not know where API is hosted ? GDPR compliance ?? All our data from EuroSaaS App needs to be in Ireland? Looks like we did not audit our third-party APIs
- 15. Contact ©2020 TeejLab Inc. All Rights Reserved. Baljeet Malhotra, PhD baljeet.malhotra@teejlab.com Phone: +1-604-365-1339 https://teejlab.com #609 – 4538 Kingsway, Burnaby British Columbia, V5H 4T9 Canada