API Shield Feature List
更新时间：2023-07-25 15:35:37
API Shield Feature List
API security has emerged as a key priority for protecting vital data and services. It’s also an area where many companies lack expertise. CDNetworks’ API Shield is an API security service designed to identify flaws in APIs and harden your API security posture.
Unlike one-off tools and scanners, API Shield is based on a platform of capabilities that combines management, protection, and analysis functions. Rooted in CDNetworks’ intelligent engine, API Shield runs multiple detection processes simultaneously in real time to detect vulnerabilities in your APIs and shield them from exploitation. API Shield detects variations in normal API behavior to drive your business forward while improving awareness of your API attack surface. Robust notification and response techniques shorten mean-time-to-detect an incident and mean-time-to-repair.
Applicable Product Lines
- API Shield
How It Works
API Shield is the most effective and easiest to use product for proactively handling API-centric threats with a single solution. API Shield is deployed on CDNetworks’ globally distributed PoPs from where it detects suspicious and malicious API requests in real time, and then blocks the request or takes other proactive actions based on the observed risk and type of threat.
Using a cloud-based big data analytics platform and high-performance analysis cluster, API Shield can upload log files to big data analysis platforms where meaningful data can be extracted to pinpoint suspected and confirmed API attacks, and find trends and patterns to help guide your business decisions, investigations, and security. In this way, cybersecurity is taken into account constantly as a way to stay at least as good as the attackers, if not better.
API Shield can also monitor API activities in real time while allowing users to manage their API lifecycles. These features — and more — make API Shield the perfect solution for protecting your APIs from today’s modern threat landscape.
Key Features and Benefits
| Feature | Description |
|---|---|
| API Inventory | Defines API resources and manages their privacy and other vital status conditions across their full lifecycle. |
| API Discovery | Discovers unknown API resources using advanced log analysis technology. |
| API Consumer Identification | Identifies the source of requests based on a unique consumer ID. |
| API Permission Scope Management | Customizes the scope of API inventory and customer permissions to restrict the authentication. |
| API Request Quato Management | Manages quota limits on API requests for each user across various time periods to ensure consistent availability and performance. |
| Request Parameter Compliance Detection | Refines verification of request parameters, such as the ranges and types of parameters, to intercept illegal requests effectively. |
| Request Body Compliance Detection | Configures custom compliance settings to certain bodies, to identify the potential risks. |
| Access Control | Define who is allowed to call your API assets by IP address, HTTP headers and other parameters. |