Google rolls out API Security improvements

Google has released a preview version of its new Advanced API Security product designed to identify API-related security threats on Google Cloud, according to TechCrunch. The use of application programming interfaces has been on the rise, with a recent survey finding that API use among developers rose 61.6% from 2020 to 2021. However, this increasing reliance has made it a target for cybercriminals. Google says Advanced API Security performs two main functions: detecting misconfigurations in APIs and hunting bots. The service does these by regularly scanning enterprises managed APIs, having the added ability of recommending solutions for detected misconfigurations, and searching for malicious bots in API traffic through the use of preconfigured rules. Advanced API Security makes it easier for API teams to identify API proxies that do not conform to security standards Additionally, Advanced API Security speeds up the process of identifying data breaches by identifying bots that successfully resulted in the HTTP 200 OK success status response code, said Vikas Ananda, head of product at Google Cloud.