In this workshop, attendees will first learn the components of an API security, including API discovery, API authentication, authorization and thread detection. Next, there is a practical exercise to create an API security policy. The workshop is collaborative with feedback and suggestions provided by the facilitator. This workshop does not assume a security background or deep API expertise .

The world of APIs is changing, with graph APIs, including GraphQL, growing in popularity. At the same time, API management is also changing, as organizations increasingly use multiple API gateways across their application architecture. This includes the use of microservices and service mesh. In this session, attendees will learn about new API trends and how their organization can adapt and react .

Gartner analysts bring multiple insights and show how they intersect to change the way the world will work for software engineers and application managers who will find themselves relying more on external APIs. Analysts will describe their predictions, how they’re related and affect the IT Leaders’ worlds, and then craft a letter back from the future to tell the audience how to prepare.

As API breaches become commonplace, API security has grown in importance. APIs are now widely used in application development and integration, but are attractive targets since they access applications and data. In this session, you will learn the typical threat surface for APIs, vulnerability paths, and examples of breaches. You will then learn what techniques and technologies can protect APIs .