From the course: Cloud Security for DevSecOps Engineers: From Security Models to API Protection

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

API rate limiting and abuse prevention

API rate limiting and abuse prevention

- [Narrator] As APIs become more accessible to consumers for pulling data, there is always the risk of an attacker finding a way to compromise or abuse them through a myriad of attacks for their gain. In this video, we're going to be walking through we ways to prevent API abuse and explain a preventive strategy called API Rate Limiting. As stated by Ian from Wallarm, "API Abuse refers to the act "of wrong-handling of APIs, "gaining unsanctioned access, "and modifying the key functions "so that APIs can be used "for adversarial processes such as raiding a server "or overburdening a server." So when you think about API abuse, think about hackers or attackers attempting to compromise them and use them in ways that violate their original purpose. Let's move on to rate limiting. When we speak about APIs, rate limiting is a technique that limits the number of API requests made within a specific time period. If you are calling an API multiple times that bypasses the allowed timeframe, you…

Contents