Name: Ep. 4 - A Year in the Life of an API: Chronicles of Security Evolution
Start: 2024-07-29T06:00:00Z
End: 2024-07-29T06:00:25.000Z
Location: BrightTALK
Rating: 0

Leading companies worldwide choose Akamai to build, deliver, and secure their digital experiences — helping billions of people live, work, and play every day. Akamai Connected Cloud, a massively distributed edge and cloud platform, puts apps and experiences closer to users and keeps threats farther away. Learn more about Akamai’s cloud computing, security, and content delivery solutions.

As AI adoption accelerates, new risks emerge — not just in the models themselves, but in the APIs that power them.

In this final session of our 3-part series, we move from strategy to implementation, showing how Akamai solutions can help organizations secure modern, AI-enabled applications. Large language models (LLMs) and AI services rely heavily on APIs to connect to data sources, integrate with applications, and deliver real-time value. This API dependency creates a broader, more dynamic attack surface that must be discovered and secured.

You will learn how Firewall for AI, WAAP, and API Security work together to secure AI workloads, protect sensitive data, and reduce organizational risk. You'll also see how to discover unknown APIs used by AI systems and defend against emerging threats like prompt injection and inference abuse.

What you’ll learn:
-How APIs underpin AI workloads and introduce new security concerns
-The role of API discovery in securing LLMs and AI services
-Demo: Using Akamai’s Firewall for AI with API Security and WAAP
-How to implement layered defenses for application, API, and AI traffic

Who should attend: Security Architects, AppSec leaders, DevSecOps, and teams deploying or securing AI systems.

Ep. 3 - Securing the AI-Powered Stack: How to Protect APIs, Models, and Applications

Modern applications rely on APIs to enable functionality, data exchange, and integration with other services. Yet while application security has traditionally focused on code vulnerabilities, misconfigurations, and runtime defenses, it often overlooks the distinct risks introduced by APIs — including exposure of sensitive data, authentication weaknesses, and business logic abuse.

In this webinar, Akamai security specialists will explore the connection between API security and application security, clarifying where they intersect, how they differ, and why both are essential in mitigating today’s evolving threats.

You’ll learn how strengthening API security not only addresses a growing and targeted attack surface but also plays a critical role in reducing overall business risk. We’ll discuss how to identify key API-related risks on your security heatmap and implement strategies to minimize both their likelihood and impact.

Key topics include:

-The relationship between application and API security
-Common API-specific risks and how they affect application security posture
-How API security contributes to risk reduction and operational resilience
-How Akamai can help mitigate against OWASP Top 10 vulnerabilities

Who should attend: CISOs, CIOs, Security Architects, SOC teams, DevSecOps, and security professionals responsible for securing modern applications and APIs.

Ep. 2 - Application Security ≠ API Security. Rethinking Application, API & LLM Security

APIs are the foundation of modern digital services — enabling applications to interact, scale, and deliver seamless user experiences. In the AI era, APIs have become indispensable, acting as the fabric connecting AI systems with applications, data sources, and services in real time.

But this increased reliance comes with new risks. Recent research from Akamai’s State of the Internet: Web Application and API Threat Report 2025 and API Security Impact Study: APAC Edition 2025 highlights a sharp rise in API and web application attacks across APAC, fueled by AI-driven techniques and evolving threat vectors. In addition, AI deployments such as Large Language Models (LLMs) are also facing increased threats and vulnerabilities such as prompt injection attacks to model manipulation.

In this webinar, you will learn the latest insights from these reports, examining how organizations in APAC are navigating skyrocketing attack volumes, operational challenges, and compliance risks.
What you’ll learn:

-Web application and API attack trends impacting APAC
-How AI is influencing both attack methods and security strategies
-Common gaps in API inventory, visibility, and protection


Who should attend: CISOs, CIOs, Security Architects, SOC teams, DevSecOps, and security professionals responsible for securing modern applications and APIs.

Ep. 1 - 2025 API and Application Security: APAC Trends, Priorities and the Impact of AI

Compliance isn’t just about ticking boxes—it’s a cornerstone of long-term resilience and stronger security.
 
As regulations like DORA reshape the landscape and cyber threats grow in sophistication, security leaders must reframe compliance as a strategic opportunity, not just an obligation.
 
Join Bryan Glick (Computer Weekly) and Richard Meeus (Akamai) as they discuss how organisations can align compliance with security goals, strengthen resilience, and stay ahead of risk. Learn how to turn regulatory pressure into a security advantage—and what it takes to prove your controls are truly effective.
 
What you’ll learn:
• How to align security and compliance strategies
• Proactive risk management to prevent breaches
• How to use regulations as a catalyst for resilience

Moderator: Bryan Glick, Editor in chief, Computer Weekly
Speaker: Richard Meeus, Director of Security Technology and Strategy EMEA, Akamai

Compliance & Cyber Resilience: Strengthening Security in a Regulated World

In the final episode of our three-part series, experience TrafficPeak's powerful real-time observability platform in action with product demos. Watch how you can leverage real-time insights to optimize your content delivery and enhance viewer engagement.

 During this interactive session, you'll discover how to: 

-Gain Instant Visibility: Explore TrafficPeak's intuitive dashboard to monitor key metrics such as latency, buffering rates, and content popularity in real-time. 
-Proactively Resolve Issues: Learn how TrafficPeak identifies performance bottlenecks, empowering you to troubleshoot problems before they impact your audience. 
-Maximize Content Impact: See how actionable insights can help you fine-tune content promotion strategies and improve user retention. 
-Simplify Operations: Discover automation capabilities that streamline caching decisions and improve overall delivery efficiency. 

Whether you're looking to improve streaming performance, drive engagement, or enhance your observability strategy, let this demo show you the power of TrafficPeak's capabilities.

Don't miss this opportunity to see TrafficPeak in action and innovate your streaming experience.

Ep. 3 - Experience Real-Time Observability: Join us for a Demo

In the second episode of our three-part series, we take a deep dive into real-world customer experiences with TrafficPeak’s edge observability. Join us for an exclusive subject matter expert fireside chat where we’ll explore how businesses across media streaming, e-commerce, and finance have successfully implemented cost-effective observability to overcome challenges and enhance performance.

You’ll be able to gain valuable insights into:


-Customer Success Stories – Learn how businesses are improving performance, reliability, and user engagement with real-time observability.
-Practical Applications – Understand how observability strategies can be tailored to optimize as per your needs
-Overcoming Industry Challenges – Discover how our customers tackle scalability, latency, security, and compliance hurdles.
-Impact of Cost-effective Solutions - See how affordable observability drives results without breaking the bank

Don’t miss this insightful discussion that bridges the gap between insights and real-world applications, highlighting impactful results.
 Stay tuned for our final episode, which will feature a live product demo showcasing the power of Trafficpeak’s observability platform.

Ep. 2 - Cost-effective Edge Observability in action: Customer Success Insights

In today's fast-paced digital landscape, real-time observability is crucial for delivering seamless experiences, ensuring system reliability, and optimizing performance across industries like media streaming, e-commerce, and finance. TrafficPeak on Akamai Cloud provides instant insights that drive smarter decisions and better outcomes.

Join us to discover how TrafficPeak on Akamai Cloud can help you:


-Real-Time Insights for Smarter Decisions –Instantly monitor user behavior, system performance, and content delivery to optimize operations.
-Enhance Performance & Reliability – Predict traffic surges, balance workloads, and resolve issues before they impact users.
-Optimize Costs & Resource Allocation – Streamline caching, network routing, and cloud spend to maximize efficiency.
-Improve Security & Compliance – Detect anomalies, mitigate threats, and meet industry-specific compliance requirements.
-Stay Ahead with Best Practices – Explore the latest trends in observability and learn how industry leaders are leveraging TrafficPeak.

This is the first episode of a three-part series—stay tuned for upcoming sessions featuring real-world customer case studies and a live product demo in the final episode.

Ep. 1 - Cost-effective Edge Observability with TrafficPeak

Zero Trust isn’t just about security—it’s a critical pillar of cyber resilience. But how do you measure its impact? In this final episode of our cyber resilience webinar series, we’ll break down the real ROI of implementing Zero Trust and how Akamai Guardicore Segmentation helps you maximize security while minimizing costs.

Join us as we explore:

-How to reduce attack surfaces and simplify compliance, and enhance operational security
-How granular segmentation prevents lateral movement and minimizes business disruptions
-Real-world use cases and key metrics to quantify the financial and security benefits

Whether you’re starting or fine-tuning your security strategy, this session will equip you with insights to measure success, reduce risks, and enhance cyber resilience. Don’t miss this opportunity to take that final step in your Zero Trust journey!

Ep. 3 - Ensure Cyber Resilience: Maximizing ROI on Your Zero Trust Journey with Akamai

Cyber threats are evolving—are your defenses keeping up? In the first episode of our series, we explored cyber resilience and how to stay operational in the face of attacks. Now, we’re taking it a step further.

From ransomware and advanced persistent threats to insider attacks, cybercriminals are finding new ways to infiltrate organizations.How do you defend against these threats? The answer is Network segmentation—a critical security strategy that isolates sensitive data and systems, limits damage, and enhances threat detection and response.

Join our experts as we explore:

-Top threats impacting cyber resilience, such as ransomware 
-Live demo showing how to prevent attackers exploiting network weaknesses
-Best practices for adopting stronger security measures.

Walk away with actionable insights to protect your business from emerging threats and ensure operational resilience.

Ep. 2 - Fortifying Cyber Resilience: Tackling Top Threats with Segmentation

With ransomware attacks crippling businesses and data breaches exposing sensitive information on the rise, the question is no longer if an attack will happen, but when— and how prepared you are. That’s why maintaining business continuity and security has never been more critical.

This webinar will break down cyber resilience—What it means and why it’s crucial for businesses of all sizes.In short, cyber resilience is about staying operational and recovering quickly from cyberattacks or system failures.

In this session, we’ll explore how to improve cyber resilience through deeper visibility and threat insights across the technology stack with a focus on improving incident response. We will also be diving into the following topics:

-What are the four pillars of essential visibility and the benefits
-How a multi-layered defense improves cyber resilience
-Walkthrough of a customer case study 

Join us and take the next step in strengthening your cyber defenses and build the cyber resilience you need to protect yourself in today’s digital world.

Ep. 1 - Understanding Cyber Resilience: Why It’s Crucial for Your Business Now

APIs are integral to modern applications including AI's operational and functional aspects. Vulnerabilities and misconfigurations in APIs can lead to severe consequences like data breaches, fines, and reputational damage.

Join our live API Security demo to discover how to:

-Gain complete visibility into your APIs, and the data they handle
-Instantly create an API inventory to meet regulatory compliance requirements
-Leverage AI and machine learning to analyze API transactions and detect posture and business logic vulnerabilities
-Automate workflows for alerts, ticketing, event logs, remediation guidance, and attacker blocking
-Reduce risks early with Shift-Left API testing during the development phase

This presentation is ideal for security professionals, developers, and business leaders looking to stay ahead in the ever-changing landscape of API security.

Ep 3- AI-Powered API Security in Action

Generative AI reshapes API security, posing new threats and solutions. In this session, we will explore how malicious actors could leverage generative AI to exploit API vulnerabilities. And outline how Akamai integrates cutting-edge AI technologies to defend against these threats.

In this practical session, you will learn:

1. How generative AI is being used by attackers to discover vulnerabilities, and automate API exploitation

2. How Akamai API Security employs advanced AI models to identify suspicious patterns and predict threats in real time

3. Real-world examples of how generative AI is used in Akamai API Security to strengthen defenses

This presentation is ideal for security professionals, developers, and business leaders looking to stay ahead in the ever-changing landscape of API security.

Ep-2 Generative AI and API Security: Staying Ahead with Akamai API Security

APIs have long been the important connective tissue that enables modern applications to function, interact, and scale effectively.

In the age of AI, APIs serve as the critical infrastructure that enables seamless communication between AI systems and other applications, facilitating real-time interactions between applications, data sources, and services.

However, as APIs become more integral to AI's operational and functional aspects, they also present a growing attack surface for cyber threats. 

In this session, you will learn:

 1. The Role of APIs in AI and Agentic Systems
 2. How compromised APIs can disrupt AI systems and expose sensitive data
 3. Top security risks affecting APIs and their impact
 4. Mitigating API risks with best practices and AI-powered tools
 5. Key takeaways and next steps

This presentation is ideal for security professionals, developers, and business leaders looking to stay ahead in the ever-changing landscape of API security.

Ep-1 API security in the age of AI

In this "If Your APIs Could Talk" episode, we'll explore the Traffic Audit feature of the Akamai API Security solution. We'll introduce participants to Traffic Audit's powerful capabilities, including recording, visualizing, and analyzing API traffic within their environment. Traffic Audit allows users to easily identify and manage the risk exposure of suspicious users and unusual API behaviors by recording data flows and creating custom audits based on specific criteria. With Traffic Audit, users gain valuable insights into API activity, such as forensic analysis for specific attacks, investigation of suspicious user behavior, and troubleshooting API configurations.

The webinar will provide a comprehensive overview of how Traffic Audit works, including how to create audits that capture and retain traffic according to predetermined filters and rules. Don't miss this opportunity to learn about the innovative capabilities of Traffic Audit and how it can enhance your API security.

Ep. 11 - Deep Dive into API Security Traffic Audit Capability

In this episode of "If Your APIs Could Talk," we explore the Workflow Automation feature of Akamai API Security. This feature dramatically improves efficiency and productivity by simplifying the creation of multi-action workflows. It uses a user-friendly visual editor, customizable workflow samples, and over 300 pre-built connectors. In this session, you'll learn how to automate complex event response processes and synchronize incident-related data with third-party services like ServiceNow, JIRA, and Azure DevOps. We'll also provide examples of common workflow use cases, including: 

- Incident creation in ITSM solutions 
- Notifications to security and business teams 
- Data customization 
- Bi-directional sync with ticketing systems 
- Preventive workflows to block suspicious traffic 

Whether you're an existing user or considering Akamai API Security, this episode will provide valuable insights into using Workflow Automation to streamline your security operations.

Ep. 10 – Workflow Automation Deep Dive

According to IDC, worldwide spending on cloud computing is projected to surpass $1.35 trillion by 2027. As these costs continue to rise, corporate CIOs and CFOs are collaborating to assess the use of cloud technologies in their business growth strategies. As Akamai discovered through Project Cirrus, it is possible to realize savings by undertaking a comprehensive cloud services reassessment and applying core principles to optimize cloud services. Join us for an upcoming webinar where we will discuss how Akamai leveraged distributed cloud computing to:

• Lower cloud costs by 40% in one year
• Improve performance by over 40% faster queries
• Facilitate transition from cloud-friendly to cloud-native

During the discussion, Akamai leaders will help attendees better understand their cloud utilization and start to gain control over cloud spending, while improving performance and agility.

The Cloud Spend Conundrum: Gain Control of Ballooning Cloud Costs

In this "If Your APIs Could Talk" episode, we'll explore the Akamai API Security Native Connector feature. This new integration, built directly into our API Security solution, enables companies to send a copy of their Akamai Connected Cloud traffic to our API Security solution for analysis with just a few clicks. Enabling this integration provides complete visibility into your APIs across environments managed by Akamai, allowing for the detection of vulnerabilities and the ability to rapidly act on runtime incidents. The session will include a demonstration of the connector's seamless deployment, a technical explanation of how it works, and a spotlight on its operational benefits.

Ep. 9 - Akamai API Security Native Connector Deep Dive

Demonstrating compliance with data protection regulations has traditionally required significant effort and resources to mitigate mostly familiar risks. However, the digital landscape is evolving rapidly, introducing threats that many enterprise compliance programs don't fully address. Even regulatory bodies themselves can't always keep pace and provide explicit guidelines covering every aspect necessary to prevent breaches.

This is the case with API protection. Every time a customer, partner, or vendor engages with your business digitally, there’s an API behind the scenes facilitating a rapid exchange of information that often includes sensitive data. Understanding and mitigating API threats is essential as APIs become increasingly integral to our technological infrastructure. This webinar will equip you with an understanding of API risks, effective strategies to safeguard your systems, and the direct implications of APIs on your compliance initiatives.

This webinar is ideal for IT professionals, security analysts, compliance officers, and anyone involved in API development and management who is looking to enhance their understanding of API security and compliance.

Speakers:
- Tony Lauro, Director, Security Technology and Strategy, Akamai
- Stas Neyman, Director, Product Marketing, Akamai

API Security and Compliance: Requirements for Data Protection

Join us for the next installment in our "If Your APIs Could Talk" series, where we dive into the most exciting and innovative product features we launched in 2024. In this session, we’ll explore the five most impactful updates to our API Security solution, from the ability to scan your GitHub repositories for API specs to the unique way we calculate attack confidence scores. Each feature we have developed has been designed to meet the evolving needs of our customers and push the boundaries of what’s possible with API Security solutions. 

What You’ll Learn:
- Code Repository Integrations: Discover how to seamlessly connect your GitHub repositories to API Security and add APIs in development to your library.
- In-app learning guides: Take advantage of the in-app learning resources to better understand how to use and get the most out of the product. 
- Active Testing Coverage Center: This unique feature in Active Testing provides practical guidance on fixing issues in your environments and API testing configurations. This ensures that each API can be successfully executed and thoroughly tested.
- Attacker Confidence Scoring: Our Attacker Confidence Engine utilizes context-aware machine learning algorithms to provide a confidence score for each attack. This enables you to prioritize incidents with the greatest potential impact.
- Inventory Classification Rules: The API classification rules automatically classify existing and newly added APIs, making API inventory management easier and accelerating issue remediation. 

Whether you’re a seasoned API Security user or just starting out, this webinar will provide you with valuable insights and practical tips to leverage these new features effectively. Don’t miss this opportunity to stay ahead of the curve and maximize the potential of our API Security solution in 2025 and beyond.

Ep. 12 - Top Product Highlights from 2024

In this episode of “If Your APIs Could Talk”, we will uncover intricate strategies used by cyber attackers through a real-life API breach, focusing on the vulnerabilities that were exploited to manipulate a major retailer's loyalty program. Discover the significant impact of these attacks and the measures you can take to reinforce defenses and avoid similar intrusions. This episode will help you learn more about the constantly changing landscape of API security and ways to safeguard your organization against advanced API threats.

Ep. 8 - Anatomy of an API Attack: Insights from a Real-Life Breach

If you've been wanting to double down on your API security strategy, now is the perfect time. Learn how you can locate legacy and undocumented APIs, monitor traffic to eliminate vulnerabilities, and prevent attacks in real-time. We'll show you how to integrate robust security tests, uncover data policy violations, and build security into your API development process.

With Akamai API Security's new flexible deployment options, extended intelligence across API traffic locations, and expanded suite of integrations as part of our acquisition of Noname security, you can protect your API environment across any platform.

Don't miss this chance to enhance your API security and take advantage of Akamai's new, advanced API protections for your organization.

Ep. 7 - Doubling Down on API Security

APIs are too often rushed into production without proper testing. This creates conflict between the economic demand for new business services and the security requirements to protect these new services. Plus, developers and DevOps teams are the ones who often perform API security testing since it is very technical and has a steep learning curve. 

Join this webinar to learn how testing your APIs doesn’t have to be a roadblock to your organization. With the right mindset and tools, you can reduce the cost of fixing security vulnerabilities, continue to deliver new functionality at breakneck speeds, and improve the security posture of your APIs.

Ep. 6 - Monitor Right & Shift Left: Reshaping API security with Advanced Testing

Despite the complexity of algorithms and advanced security protocols, API security often fails to consider the sophisticated intersection of AI and API security. We will bridge this gap in our upcoming episode, ""Rise of AI Assisted API Attacks,"" by highlighting how emerging AI technologies can be harnessed to enhance protection against these modern threats.

This session will guide attendees through the latest trends in AI-driven attacks, how attackers are using AI to attack APIs, and tips and tricks from our Threat hunting team on how they use automation to combat these fast-growing threats.

Ep. 5 - Rise of AI Assisted API Attacks

As the reliance on APIs continues to surge, so does the scale of security threats aimed at exploiting data vulnerabilities. These threats highlight the need for effective data protection methods. Data tokenization and data encryption stand out as key techniques, each offering unique benefits and applications.

In our upcoming webinar, we'll closely examine these strategies, emphasizing the critical role of tokenization in safeguarding your API data.

Join us to explore the essentials of API data protection and discover the importance of tokenization in creating a robust security strategy. We'll demonstrate how tokenization ensures the safety of your data, maintaining its confidentiality, integrity, and accessibility in our digital era.

Ep. 3 - The Importance of Data Tokenization Over Traditional Encryption

Dive into the rapidly expanding realm of API Security compliance with our second episode in our monthly series, If Your APIs Could Talk.  As organizations strive to meet stringent security standards, ensuring that APIs adhere to regulatory requirements has become non-negotiable. In this session, our technical experts will guide you through the nuances of API security compliance, exploring topics such as data privacy, encryption protocols, and region-specific regulations. 

Join us for a comprehensive journey into the technical intricacies that power API Security compliance. 

Don't miss this opportunity to decode the complexities and unveil the driving forces behind compliance in the API landscape. Register now.

Ep. 2 -What Drives API Security Compliance

In an era where data breaches and cyber threats loom large, safeguarding sensitive information within APIs stands as a paramount concern for organizations. Join us as Menachem Perlman, our Director of Solutions Engineering discusses the pivotal significance of secure data storage within API frameworks.

Join us in the first episode of our new monthly series on API Security, Join us to gain actionable insights and practical strategies for enhancing your API security posture through robust and secure data storage practices.

Don't miss this opportunity to fortify your organization's defenses and ensure the integrity of your API-driven operations. Register now for the series.

Ep. 1 - The Importance of Storing Data in Your API Security Strategy

API Series:  If Your APIs Could Talk

Explore the lifecycle of an API with a focus on evolving security measures in episode 4 in the “If An API Could Talk” series. We will showcase how adopting a strong API security program leads to many different lenses of visibility including discovery, risk audits, and behavioral detection.

Gain insights through our recent State of the Internet report, real-world case studies on overcoming breaches and enhancing incident response. Join us to master API security best practices and stay ahead in the digital landscape.

Ep. 4 - A Year in the Life of an API: Chronicles of Security Evolution

APIs

API Management

Application Security

Attack Vectors

Threat Defence

IT Security

Malware

Phising

Threat Intelligence

Threat Detection

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Ep. 4 - A Year in the Life of an API: Chronicles of Security Evolution

Presented by

About this talk

Akamai APAC