Dr. Omaru Maruatona discusses protecting the API ecosystem. He advocates for a holistic approach to security that recognizes how vulnerabilities in one component can expose others. He suggests layered security with multiple checkpoints to increase the cost and effort of attacks. Dynamic threat intelligence sharing is key to mitigate zero-day vulnerabilities and proactively manage risks. Standards need to be easily implemented, regularly updated, product-agnostic and accessible. Emerging trends include API security guidelines from Monetary Authority of Singapore and establishing trusted service provider registers. However, security must be balanced with user experience.

1. Protecting the API ecosystem
APIDays 2021 Singapore
Dr Omaru Maruatona, CEO
omaru@aiculus.co

2. Speaker Profile
 Cyber-AI consultant
 Industry Professor
 Founder and CEO
© Aiculus 2021 | Confidential

3. Talking Points
3
1. Holistic approach to
ecosystem security 5. Trends: SG, UK, Aus
© Aiculus 2020 | Confidential
3. API specific threat
intel sharing
2. Layered Security
4. Dynamic security
standards
6. Security vs UX

4. The API ecosystem
4
 Strong interconnection of
service providers
 Inferred (credential based)
Trust system
© Aiculus 2021 | Confidential
 Network of Interconnected
systems/ services
 Some services require more
than one entity to be complete
What is it? Features

5. Holistic approach to security
© Aiculus 2021 | Confidential
Weak link
exposes others Ecosystem integrity
depends on each
component
No herd
immunity

6. Layered security
© Aiculus 2021 | Confidential
 Several checkpoints to reach
crown jewel
 Increase cost/effort of attack
 Compromise between cost,
security and performance

7. © Aiculus 2021 | Confidential
Realtime threat sharing
 Zero day spread mitigation  Proactive Risk management  Reduce risk impact

8. Dynamic standards
© Aiculus 2021 | Confidential
 Easily implementable
 Regular updates to
keep up with threat
dynamics
 Product agnostic
 Easily accessible

9. Key Trends
MAS Guidelines on
API security
© Aiculus 2021 | Confidential
Ecosystem
compliance-based
register
Trusted service
provider register

10. © Aiculus 2021 | Confidential
Security vs UX

11. Securing the new frontier
omaru@aiculus.co