Identity and the API Economy

Moderator(s):

Craig Burton Distinguished Analyst

KuppingerCole

The emerging API Economy is presenting significant challenges to all industry participants. These participants include all constituents such as technology providers, integrators, customers, governments, educational institutions, developers and so on. There is not a constituency that will not be impacted in some way because of The API Economy.

KuppingerCole has an inclusive set of sessions, workshops and vendor participants that are designed to help organization better understand details of the API Economy and its potential short term and long term impact.

This section covers the status of the industry relative to The API Economy and the challenges that are facing customers now and in the future.

Continuing Education Credits

Prerequisites: None
Advance Preparation: None
Learning Level: Intermediate
Field: Computer Science

After attending this block you will be able to:

Describe the API Ecosystem that underlies the API economy
Explain how an Identity Minting Architecture can make the API Economy real
Describe the security issues around APIs
Describe known attack vectors, future risks and the challenges that security architects face in our API driven world.

This block qualifies for up to 2 Group Learning based CPEs depending on the number of sessions you attend.

Sessions:

The API Economy—Understanding the API Ecosystem

Date: Thursday, May 16, 2013 Time: 10:30-11:30

The API Economy—Understanding the API Ecosystem

Craig Burton, KuppingerCole

In theis session, the API Ecosystem is explained, different vendors and customers providing for the ecosystem and using the ecosystem participate in explaining their views.

Identity Minting Architecture for the API Economy

Pamela Dingle, Microsoft

What does it take to make an API economy real? Well the first thing you need is to set up a mint. Using OAuth and OpenID Connect together, the API economy can serve both web and mobile masters, providing the right level of identity validation for varied API uses, with a minimal level of training and understanding needed for either API resource server operators or client developers. Pamela Dingle will run through a working system, talking not just about the standards but about the rest of the...

API Security

Using and Abusing APIs: an Examination of the API Attack Surface

Date: Thursday, May 16, 2013 Time: 11:30-12:30

Using and Abusing APIs: an Examination of the API Attack Surface

Craig Burton, KuppingerCole • Ronnie Mitra, Layer 7 Technologies

The good news is that we now have powerful standards and frameworks that promise to protect valuable resources and identities in the API space. But, what implementation details need to be considered and what damage can be done if we aren’t careful? In this session we will consider known attack vectors, speculate on future risks and investigate the challenges that security architects face in our API driven world.