Name: Ep. 4 - A Year in the Life of an API: Chronicles of Security Evolution
Start: 2024-07-29T06:00:00Z
End: 2024-07-29T06:00:25.000Z
Location: BrightTALK

Akamai is the cybersecurity and cloud computing company that powers and protects business online. Our market-leading security solutions, superior threat intelligence, and global operations team provide defense in depth to safeguard enterprise data and applications everywhere. Akamai’s full-stack cloud computing solutions deliver performance and affordability on the world’s most distributed platform. Global enterprises trust Akamai to provide the industry-leading reliability, scale, and expertise they need to grow their business with confidence. Learn more at akamai.com and akamai.com/blog, or follow Akamai Technologies on X and LinkedIn.

本ウェビナーでは、ゼロトラスト・セキュリティの次の一手、そしてランサムウェア対策として急速に広がりを見せている内部セグメンテーション強化施策における導入ステップと、頻繁に活用されているセグメンテーション手法をご紹介します。

ゼロトラスト型セグメンテーション導入のベストプラクティスと国内事例

本ウェビナーでは、現代のマルチクラウド環境における運用・セキュリティ向上のために重要な製品選定ポイントについて国内外の事例も交えて45分でわかりやすく解説します。

話題のマイクロセグメンテーション、最適なツール選定のための比較ポイント解説

Zero Trust isn’t just about security—it’s a critical pillar of cyber resilience. But how do you measure its impact? In this final episode of our cyber resilience webinar series, we’ll break down the real ROI of implementing Zero Trust and how Akamai Guardicore Segmentation helps you maximize security while minimizing costs.

Join us as we explore:

-How to reduce attack surfaces and simplify compliance, and enhance operational security
-How granular segmentation prevents lateral movement and minimizes business disruptions
-Real-world use cases and key metrics to quantify the financial and security benefits

Whether you’re starting or fine-tuning your security strategy, this session will equip you with insights to measure success, reduce risks, and enhance cyber resilience. Don’t miss this opportunity to take that final step in your Zero Trust journey!

Ensure Cyber Resilience: Maximizing ROI on Your Zero Trust Journey with Akamai

With ransomware attacks crippling businesses and data breaches exposing sensitive information on the rise, the question is no longer if an attack will happen, but when— and how prepared you are. That’s why maintaining business continuity and security has never been more critical.

This webinar will break down cyber resilience—What it means and why it’s crucial for businesses of all sizes.In short, cyber resilience is about staying operational and recovering quickly from cyberattacks or system failures.

In this session, we’ll explore how to improve cyber resilience through deeper visibility and threat insights across the technology stack with a focus on improving incident response. We will also be diving into the following topics:

-What are the four pillars of essential visibility and the benefits
-How a multi-layered defense improves cyber resilience
-Walkthrough of a customer case study 

Join us and take the next step in strengthening your cyber defenses and build the cyber resilience you need to protect yourself in today’s digital world.

Understanding Cyber Resilience: Why It’s Crucial for Your Business Now

Cyber threats are evolving—are your defenses keeping up? In the first episode of our series, we explored cyber resilience and how to stay operational in the face of attacks. Now, we’re taking it a step further.

From ransomware and advanced persistent threats to insider attacks, cybercriminals are finding new ways to infiltrate organizations.How do you defend against these threats? The answer is Network segmentation—a critical security strategy that isolates sensitive data and systems, limits damage, and enhances threat detection and response.

Join our experts as we explore:

-Top threats impacting cyber resilience, such as ransomware 
-Live demo showing how to prevent attackers exploiting network weaknesses
-Best practices for adopting stronger security measures.

Walk away with actionable insights to protect your business from emerging threats and ensure operational resilience.

Fortifying Cyber Resilience: Tackling Top Threats with Segmentation

Ransomware has quickly become one of the most severe threats to the financial sector, with attacks skyrocketing by 70% over the past year. Unlike typical cyber incidents, today’s ransomware assaults are multi-staged and highly targeted, designed to not only disrupt operations but also exfiltrate sensitive data and amplify pressure through direct outreach to clients and regulators. Financial institutions face unique risks, from compromised reputation to operational paralysis, and require tailored defenses to stay protected.

In this webinar, our cybersecurity experts will reveal FS-ISAC’s latest findings on ransomware trends and defense strategies tailored for finance. Attendees will learn to build resilient defenses, create rapid response plans, and navigate high-stakes decision-making, equipping them with the critical tools needed to secure their organizations.

What You’ll Learn:
- Anatomy of a Ransomware Attack: From initial breach to quadruple extortion, learn the stages and tactics that make ransomware so disruptive to financial firms.
- Defense Essentials: Key cybersecurity fundamentals—like Zero Trust policies, multi-factor authentication, and isolated, resilient backup solutions—to stop ransomware in its tracks.
- Crisis Management and Compliance: Build an agile incident response plan, manage communication with clients, and navigate global regulations to reduce impact.
- Informed Decision-Making: Weigh the complex risks and compliance factors in ransom payments, with guidance for safeguarding both your operations and reputation.

Akamai is an approved ISC2 CPE Submitter Partner. Earn CPE Credits by watching our webinars.

Ransomware Readiness for Financial and Critical Industries

Security buyers face endless claims about protection efficacy — but how do you separate marketing from measurable reality?

In this session, SecureIQLab and Akamai break down the results of the industry’s only recurring, standards-based comparative WAAP test. Join Cameron Camp, Analyst Security Researcher and Akamai’s Brent Maynard, to learn how independent testing is conducted, why resiliency and false-positive avoidance matter as much as detection rates, and where most vendors still fall short.

We’ll share Akamai’s top-performing results, key market learnings, and the practical questions every security leader should ask when evaluating a WAF or WAAP. Walk away with actionable insights to validate your current defenses and strengthen your buying decisions.


Akamai is an approved ISC2 CPE Submitter Partner. Earn CPE Credits by watching our Webinar.

Independent Testing, Real Results: How Secure Is Your WAAP?

As apps and APIs spread across cloud, on-prem, and hybrid environments, securing them consistently can be a challenge.

Watch this on-demand session to explore Akamai App & API Protector Hybrid — and see how you can extend powerful WAAP capabilities beyond the Edge.

What you’ll learn:
- How to unify WAF policy enforcement across environments
- How to secure East-West and North-South traffic with built-in resiliency
- Strategies to simplify operations and reduce vendor complexity

Whether you're modernizing infrastructure or closing WAF coverage gaps, this session offers practical guidance to help protect what matters — wherever it runs.

Extend WAF Protection Across Environments

Companies are spending billions in AI, building apps like customer service chatbots and decision tools to help customers select the best products. And there is much riding on these apps – organizations expect these big investments to create revenue, streamline operations, and reduce costs. Unfortunately, along with the new opportunities come new threats.

AI-driven applications are non-deterministic, giving different results every time even when given the same input. And because of this, bad actors can manipulate and attack these apps in unique ways. These attacks often go unseen and undetected, so you could suffer significant damage before you realize what happened. In this talk, we’ll show you how you can protect yourself from these new dangers.

Find out:
- The most misunderstood risks of AI apps
- The most common attacks and how they hurt companies’ top and bottom lines
- How security teams and business leaders can partner successfully to get the most ROI from AI apps
- Questions to ask when evaluating AI Security solutions

Securing AI-Driven Apps: Stopping Attacks Before They Stop You

Generative AI spending is projected to surge nearly 75% in 2025, as enterprises race to stay competitive while pursuing low-risk adoption strategies. This on-demand session explores key findings from The State of Enterprise AI study, revealing how organizations are approaching AI to drive value securely and at scale. 

The research shows that leading enterprises are prioritizing proven use cases to quickly build AI fluency, deliver measurable ROI, and minimize security and operational risks. This strategic approach enables safe experimentation and lays the groundwork for future innovation. 

Key Takeaways: 
- How to balance AI innovation with built-in risk mitigation.
 - Which AI use cases are delivering fast, measurable value today.
 - Why infrastructure is critical for secure, scalable AI adoption.

Ep 1 – State of Enterprise AI Adoption and Risk Management

Cloud adoption has never been higher—but so have costs, complexity, and performance trade-offs. 

As enterprises scale, multicloud strategies promise flexibility and resilience but often introduce unexpected challenges: rising spend, unpredictable workloads, and limited portability. 

Join us for a panel discussion on how leaders are approaching and adapting their strategies to maintain a competitive advantage while driving operational efficiency.

Ep 4 – The Cloud Cost Trap - Balancing Performance, Budget & Multi Cloud Portability

India's rapid digital transformation has positioned it as a burgeoning hub for cloud computing and AI-driven innovation. However, as enterprises scale their cloud infrastructures to support advanced technologies like Generative AI, many are encountering escalating costs and security risks that threaten to offset the benefits of digitalization. 

With decades of experience supporting and securing some of the largest, most successful Indian events such as IPL, join this interactive session to learn how you can architect and build on a more cost-effective, and secure cloud. 
In this webinar, you’ll learn about: 

• Real-world cost-saving and AI use cases 
• Akamai’s firsthand experience in reducing public cloud spend by 40% 
• Deploying & securing workloads, including AI workloads 

This session is recommended for IT and Business leaders who are looking to save cloud costs, modernize applications, or deploy exciting new AI solutions.

Ep 5 – Reducing cloud costs without killing innovation

Want faster insights from your AI efforts? Then you need to get the inferencing process closer to users and devices. Join this webcast as a 
guest analyst from IDC and a cloud expert from Akamai offer strategies for organizations to optimize AI and their infrastructure by moving 
AI inference closer to the edge. 
They will discuss: 
• Use cases, opportunities, and success stories of AI at the edge 
• How to overcome 
challenges that stand in the way of ROI 
• Capabilities and solutions that optimize AI inference

Ep 2 – AI everywhere: How distributed cloud is reshaping inference

Security buyers face endless claims about protection efficacy — but how do you separate marketing from measurable reality?

In this session, SecureIQLab and Akamai break down the results of the industry’s only recurring, standards-based comparative WAAP test. Join Cameron Camp, Analyst Security Researcher and Akamai’s Brent Maynard, to learn how independent testing is conducted, why resiliency and false-positive avoidance matter as much as detection rates, and where most vendors still fall short.

We’ll share Akamai’s top-performing results, key market learnings, and the practical questions every security leader should ask when evaluating a WAF or WAAP. Walk away with actionable insights to validate your current defenses and strengthen your buying decisions.

Want to learn more? Compare WAAP vendor efficacy data in this 2025 report: https://www.akamai.com/lp/report/2025-waf-comparison-report

Additional Resources:

-On-Demand Webinar: Extend WAF Protections: https://www.brighttalk.com/webcast/13169/646081
-Webinar: Adaptive Security Engine: Next-Gen WAAP: https://www.brighttalk.com/webcast/13169/651706

Independent Testing, Real Results:  How Secure Is Your WAAP?

Generative AI spending is projected to surge nearly 75% in 2025, as enterprises race to stay competitive while pursuing low-risk adoption strategies. This on-demand session explores key findings from The State of Enterprise AI study, revealing how organizations are approaching AI to drive value securely and at scale.

The research shows that leading enterprises are prioritizing proven use cases to quickly build AI fluency, deliver measurable ROI, and minimize security and operational risks. This strategic approach enables safe experimentation and lays the groundwork for future innovation.

Key Takeaways:
- How to balance AI innovation with built-in risk mitigation.
- Which AI use cases are delivering fast, measurable value today.
- Why infrastructure is critical for secure, scalable AI adoption.

Watch now to gain strategic insights and actionable guidance for your organization’s AI journey.

Forrester Insights: The State of Enterprise AI Adoption and Risk Management

Cloud and edge computing are evolving rapidly — and enterprises in Asia-Pacific are rethinking how to deliver secure, high-performance, and personalized digital experiences. In this conversation, Matt Butcher, CEO of Fermyon, and Ari Weil, VP of Product Marketing at Akamai, explore the future of cloud and edge computing, from the rise of WebAssembly (WASM) and next-generation serverless functions to the role of AI and GPU efficiency at the edge. 

Key topics discussed: 

-How WebAssembly enables faster, more secure, and efficient serverless applications 
-Why edge native architectures are redefining application design for global enterprises 
-The impact of distributed GPUs on AI inference and real-time processing 
-Opportunities for industries such as media, retail, financial services, and healthcare 
-Best practices for designing future-ready applications across cloud and edge 

Whether you’re a CIO, CTO, or IT decision-maker, this session offers insights on how distributed cloud and edge strategies can help your organization improve performance, scale globally, and unlock new customer experiences.

Ep 3 – Pushing Boundaries: The Future of Cloud and Edge Computing

Achieving a solid network segmentation policy is only the beginning. In today’s dynamic threat landscape, even the most well-architected segmentation policies require continuous tuning and vigilance after deployment. This session dives deep into the evolving world of Day-2 network security — where static rules become liabilities, and policy maintenance is a continuous battle against misconfigurations, overly permissive access, and silent policy failures.

Join us to explore 7 critical real-world scenarios that expose hidden gaps in segmentation strategies — from overshadowed and zero-hit rules to unrestricted admin access and rogue remote tools. Learn how attackers exploit these weaknesses and how security teams can shift from a “set it and forget it” mindset to a proactive, adaptive approach.

We’ll cover actionable techniques to:
- Detect and eliminate overly broad or obsolete rules
- Enforce least-privilege communication at scale
- Use automation and traffic intelligence to continuously optimize your policy
- Bring hidden attack paths to light — before adversaries do

Akamai is an approved ISC2 CPE Submitter Partner. Earn CPE Credits by watching our Webinar.

Ep. 3 –Making Cyber Resilience Work for Critical Infrastructure

In this session, Akamai shares key principles that form the foundation of an effective Zero Trust strategy, including continuous verification, least privilege access, and microsegmentation. You’ll gain practical guidance on how to assess your organization’s readiness, avoid common pitfalls, and take a phased, outcome-driven approach to improve cyber resilience, secure access and operations in today’s dynamic threat landscape.

Akamai is an approved ISC2 CPE Submitter Partner. Earn CPE Credits by watching our Webinar.

Ep. 2 – Zero Trust doesn’t have to be complex—when it’s done right

Join us for the next installment in our "If Your APIs Could Talk" series, where we dive into the most exciting and innovative product features we launched in 2024. In this session, we’ll explore the five most impactful updates to our API Security solution, from the ability to scan your GitHub repositories for API specs to the unique way we calculate attack confidence scores. Each feature we have developed has been designed to meet the evolving needs of our customers and push the boundaries of what’s possible with API Security solutions. 

What You’ll Learn:
- Code Repository Integrations: Discover how to seamlessly connect your GitHub repositories to API Security and add APIs in development to your library.
- In-app learning guides: Take advantage of the in-app learning resources to better understand how to use and get the most out of the product. 
- Active Testing Coverage Center: This unique feature in Active Testing provides practical guidance on fixing issues in your environments and API testing configurations. This ensures that each API can be successfully executed and thoroughly tested.
- Attacker Confidence Scoring: Our Attacker Confidence Engine utilizes context-aware machine learning algorithms to provide a confidence score for each attack. This enables you to prioritize incidents with the greatest potential impact.
- Inventory Classification Rules: The API classification rules automatically classify existing and newly added APIs, making API inventory management easier and accelerating issue remediation. 

Whether you’re a seasoned API Security user or just starting out, this webinar will provide you with valuable insights and practical tips to leverage these new features effectively. Don’t miss this opportunity to stay ahead of the curve and maximize the potential of our API Security solution in 2025 and beyond.

Ep. 12 - Top Product Highlights from 2024

In this "If Your APIs Could Talk" episode, we'll explore the Traffic Audit feature of the Akamai API Security solution. We'll introduce participants to Traffic Audit's powerful capabilities, including recording, visualizing, and analyzing API traffic within their environment. Traffic Audit allows users to easily identify and manage the risk exposure of suspicious users and unusual API behaviors by recording data flows and creating custom audits based on specific criteria. With Traffic Audit, users gain valuable insights into API activity, such as forensic analysis for specific attacks, investigation of suspicious user behavior, and troubleshooting API configurations.

The webinar will provide a comprehensive overview of how Traffic Audit works, including how to create audits that capture and retain traffic according to predetermined filters and rules. Don't miss this opportunity to learn about the innovative capabilities of Traffic Audit and how it can enhance your API security.

Ep. 11 - Deep Dive into API Security Traffic Audit Capability

In this episode of "If Your APIs Could Talk," we explore the Workflow Automation feature of Akamai API Security. This feature dramatically improves efficiency and productivity by simplifying the creation of multi-action workflows. It uses a user-friendly visual editor, customizable workflow samples, and over 300 pre-built connectors. In this session, you'll learn how to automate complex event response processes and synchronize incident-related data with third-party services like ServiceNow, JIRA, and Azure DevOps. We'll also provide examples of common workflow use cases, including: 

- Incident creation in ITSM solutions 
- Notifications to security and business teams 
- Data customization 
- Bi-directional sync with ticketing systems 
- Preventive workflows to block suspicious traffic 

Whether you're an existing user or considering Akamai API Security, this episode will provide valuable insights into using Workflow Automation to streamline your security operations.

Ep. 10 – Workflow Automation Deep Dive

In this "If Your APIs Could Talk" episode, we'll explore the Akamai API Security Native Connector feature. This new integration, built directly into our API Security solution, enables companies to send a copy of their Akamai Connected Cloud traffic to our API Security solution for analysis with just a few clicks. Enabling this integration provides complete visibility into your APIs across environments managed by Akamai, allowing for the detection of vulnerabilities and the ability to rapidly act on runtime incidents. The session will include a demonstration of the connector's seamless deployment, a technical explanation of how it works, and a spotlight on its operational benefits.

Ep. 9 - Akamai API Security Native Connector Deep Dive

In this episode of “If Your APIs Could Talk”, we will uncover intricate strategies used by cyber attackers through a real-life API breach, focusing on the vulnerabilities that were exploited to manipulate a major retailer's loyalty program. Discover the significant impact of these attacks and the measures you can take to reinforce defenses and avoid similar intrusions. This episode will help you learn more about the constantly changing landscape of API security and ways to safeguard your organization against advanced API threats.

Ep. 8 - Anatomy of an API Attack: Insights from a Real-Life Breach

If you've been wanting to double down on your API security strategy, now is the perfect time. Learn how you can locate legacy and undocumented APIs, monitor traffic to eliminate vulnerabilities, and prevent attacks in real-time. We'll show you how to integrate robust security tests, uncover data policy violations, and build security into your API development process.

With Akamai API Security's new flexible deployment options, extended intelligence across API traffic locations, and expanded suite of integrations as part of our acquisition of Noname security, you can protect your API environment across any platform.

Don't miss this chance to enhance your API security and take advantage of Akamai's new, advanced API protections for your organization.

Ep. 7 - Doubling Down on API Security

APIs are too often rushed into production without proper testing. This creates conflict between the economic demand for new business services and the security requirements to protect these new services. Plus, developers and DevOps teams are the ones who often perform API security testing since it is very technical and has a steep learning curve. 

Join this webinar to learn how testing your APIs doesn’t have to be a roadblock to your organization. With the right mindset and tools, you can reduce the cost of fixing security vulnerabilities, continue to deliver new functionality at breakneck speeds, and improve the security posture of your APIs.

Ep. 6 - Monitor Right & Shift Left: Reshaping API security with Advanced Testing

Despite the complexity of algorithms and advanced security protocols, API security often fails to consider the sophisticated intersection of AI and API security. We will bridge this gap in our upcoming episode, ""Rise of AI Assisted API Attacks,"" by highlighting how emerging AI technologies can be harnessed to enhance protection against these modern threats.

This session will guide attendees through the latest trends in AI-driven attacks, how attackers are using AI to attack APIs, and tips and tricks from our Threat hunting team on how they use automation to combat these fast-growing threats.

Ep. 5 - Rise of AI Assisted API Attacks

As the reliance on APIs continues to surge, so does the scale of security threats aimed at exploiting data vulnerabilities. These threats highlight the need for effective data protection methods. Data tokenization and data encryption stand out as key techniques, each offering unique benefits and applications.

In our upcoming webinar, we'll closely examine these strategies, emphasizing the critical role of tokenization in safeguarding your API data.

Join us to explore the essentials of API data protection and discover the importance of tokenization in creating a robust security strategy. We'll demonstrate how tokenization ensures the safety of your data, maintaining its confidentiality, integrity, and accessibility in our digital era.

Ep. 3 - The Importance of Data Tokenization Over Traditional Encryption

Dive into the rapidly expanding realm of API Security compliance with our second episode in our monthly series, If Your APIs Could Talk.  As organizations strive to meet stringent security standards, ensuring that APIs adhere to regulatory requirements has become non-negotiable. In this session, our technical experts will guide you through the nuances of API security compliance, exploring topics such as data privacy, encryption protocols, and region-specific regulations. 

Join us for a comprehensive journey into the technical intricacies that power API Security compliance. 

Don't miss this opportunity to decode the complexities and unveil the driving forces behind compliance in the API landscape. Register now.

Ep. 2 -What Drives API Security Compliance

In an era where data breaches and cyber threats loom large, safeguarding sensitive information within APIs stands as a paramount concern for organizations. Join us as Menachem Perlman, our Director of Solutions Engineering discusses the pivotal significance of secure data storage within API frameworks.

Join us in the first episode of our new monthly series on API Security, Join us to gain actionable insights and practical strategies for enhancing your API security posture through robust and secure data storage practices.

Don't miss this opportunity to fortify your organization's defenses and ensure the integrity of your API-driven operations. Register now for the series.

Ep. 1 - The Importance of Storing Data in Your API Security Strategy

API Series:  If Your APIs Could Talk

Explore the lifecycle of an API with a focus on evolving security measures in episode 4 in the “If An API Could Talk” series. We will showcase how adopting a strong API security program leads to many different lenses of visibility including discovery, risk audits, and behavioral detection.

Gain insights through our recent State of the Internet report, real-world case studies on overcoming breaches and enhancing incident response. Join us to master API security best practices and stay ahead in the digital landscape.

Ep. 4 - A Year in the Life of an API: Chronicles of Security Evolution

APIs

API Management

Application Security

Attack Vectors

Threat Defence

IT Security

Malware

Phising

Threat Intelligence

Threat Detection

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Ep. 4 - A Year in the Life of an API: Chronicles of Security Evolution

Presented by

About this talk

Akamai APAC