{"id":3177,"date":"2021-04-25T18:54:08","date_gmt":"2021-04-25T17:54:08","guid":{"rendered":"https:\/\/www.appleute.de\/?page_id=3177"},"modified":"2022-03-26T18:25:45","modified_gmt":"2022-03-26T17:25:45","slug":"api-sicherheit","status":"publish","type":"page","link":"https:\/\/www.appleute.de\/en\/app-development-services\/api-development\/api-security\/","title":{"rendered":"API-Security"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Security gaps in APIs must be closed<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

API Security<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

APIs are becoming more and more popular with companies - which naturally means that interest on the dark side of the force is also increasing. APIs are a favorite target for hacking, as this is where the most important information is transmitted. How can I ensure the security of my API?<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t<\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\tSecure API now<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"API\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

API security - a prerequisite for modern companies<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Modern companies maintain modern technologies. Startups and SMEs have been making use of APIs (Application Programming Interfaces<\/strong><\/a>), so Programming Interfaces<\/strong><\/a>, use. API security is a prerequisite here. Secure APIs enable the secure transfer of data between (distributed) systems so that companies can share information reliably.<\/span><\/p>

As a supplement, many APIs are based on the REST software architecture (REST API<\/strong><\/a>). During data transfer, protocols for data exchange are transmitted here in specific return formats, e.g. SOAP for XML.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t<\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\tMore about API Development<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

API security - the three pillars<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The accessibility of your company via APIs is now essential, because processes can be made more efficient and in some cases even completely automated as a result. How App Developer<\/strong> <\/a>also can API developers<\/strong><\/a> Leverage resources to help users make the best use of them. The big challenge is to program application interfaces in such a way that API security, defined by the three pillars of authentication, authorization and accountability of users as well as applications, is high:<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tAuthentication: Who is calling our API? <\/a>\n\t\t\t\t\t<\/h4>\n\n\t\t\t\t\t

This is where the source of the HTTP call is determined.<\/span><\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tAuthorisation: What rights does the person accessing the API have?<\/a>\n\t\t\t\t\t<\/h4>\n\n\t\t\t\t\t

Because each HTTP call is handled independently in the context of a stateless REST API, the scope of action must be defined anew each time.<\/span><\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tTraceability: Who did what and when with which resources?<\/a>\n\t\t\t\t\t<\/h4>\n\n\t\t\t\t\t

Here, the processing of the resource is logged in detail.<\/span><\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"Security\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

API security - there is no guarantee<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

API developers<\/a> are specialised in securing Java REST API so that REST API security is guaranteed.<\/span><\/p>

API security can never be guaranteed 100 %, because APIs are exposed to the mechanisms of the web - and here, unfortunately, there are not only white hats, but also black hats. Cleaning up security holes is part of the daily routine of a good CTOs<\/strong><\/a> and its team. German and international companies can take measures to e.g. Java REST APIs<\/strong><\/a> to secure optimally.<\/span><\/p>

Basically, then, there is a kind of API security ideal: on the one hand, you want to be a (REST) API developers<\/strong><\/a> make life difficult for attackers, and on the other hand, the programming interfaces should still be easy for users to operate.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t<\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\tAPI project? Tell us more<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

API security - API management tools as a potential security risk<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The tools for administering APIs, so-called API management tools or API management solutions, which are implemented by agencies for API Development<\/a><\/strong> throughout Germany (Munich, Stuttgart, Hamburg, Berlin, etc.) and used by companies, have various components for securing APIs. These usually include methods for authentication and data rate limiting (synonymously bandwidth control). Such methods allow secure access by employees, partners, customers and third-party developers to protected information.<\/span><\/p>

Unfortunately, despite these tools for managing APIs, conventional security measures can be partially circumvented. Where API Management Solutions<\/strong><\/a> and their methods fall short, customized solutions for API security must be created so that API attacks are successfully prevented or averted. <\/span><\/p>

The following are potential threats to API security not only for German companies but to companies around the world that have caused serious problems even for those with the best IT infrastructure and top API developers:<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

API security - potential threats<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tAttacks on secure connections - trial & error<\/a>\n\t\t\t\t\t<\/h4>\n\n\t\t\t\t\t

API management tools block invalid login attempts. However, they often do not prevent login attempts from being repeatedly exercised. API hackers keep login requests in the just inconspicuous range and operate with different IPs.<\/span><\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tMan-in-the-middle attacks - sneaky menace<\/a>\n\t\t\t\t\t<\/h4>\n\n\t\t\t\t\t

Hackers gain access by directing unsuspecting internal users to log into a compromised system. Here, API tokens and API keys - for more complex cases, you should move away from API keys to OAuth2 and OpenID Connect - can be tapped by the hacker, which then allow access to API services that appear completely ordinary.<\/span><\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tDistributed Denial-of-Service Attack (DDoS Attack) - \u201cstrong\u201d together<\/a>\n\t\t\t\t\t<\/h4>\n\n\t\t\t\t\t

In a DDoS attack, multiple ordinary API requests (read \/ write) are orchestrated across different clients, with the sheer volume of API access crippling the API service. In this way, API systems can be compromised (e.g. domain hijacking through fake DNS responses).<\/span><\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tAttacks on data (banks) and applications<\/a>\n\t\t\t\t\t<\/h4>\n\n\t\t\t\t\t

With injection attacks, a hacker can \"inject\" untrusted elements into programmes or application services by means of a query: the queries are read and processed by an interpreter and the programme execution changes, e.g. API services can be manipulated by loading files of excessive size.<\/span><\/p>

It is not only with injection attacks that hackers (employees not excluded) can extract, steal, destroy or manipulate data. In addition to injection attacks, there are other threats to API security such as the introduction of malicious code and overload due to extreme use (server response times increase).<\/span><\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tLack of documentation of API traffic in a reporting API<\/a>\n\t\t\t\t\t<\/h4>\n\n\t\t\t\t\t

All actions (read and write) performed with or on an API should be documented in a reporting API. For this purpose, a kind of API activity log file should be accessible. This way, an analysis can be carried out during or after an API security threat situation in order to react optimally and perform API security prevention.<\/span><\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t<\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\tConcerned about API security? Consult appleute.<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

API Security - Conclusion<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The trade-off between <\/span>taking a defensive stance<\/span><\/i> and <\/span>providing user experience<\/span><\/i> should definitely play a central role in the implementation and assessment of API security. API development agencies like appleute<\/strong> <\/a>are at your side with advice as well as practical support - you'd better be \"safe than sorry\".<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"Secure\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

You want to connect multiple apps via an API securely?<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Contact our team - we will be happy to help you!<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

API security gaps must be closed API security APIs are becoming more and more popular with companies - which naturally means that interest on the dark side of the force is also increasing. APIs are a favorite target for hacking, as this is where the most important information is transmitted. How can I ensure the security of my API? Secure API now API security - prerequisite... Read More \"API-Security<\/span><\/a><\/p>","protected":false},"author":4,"featured_media":5448,"parent":1618,"menu_order":2,"comment_status":"closed","ping_status":"closed","template":"","meta":{"content-type":"","neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","_themeisle_gutenberg_block_has_review":false,"footnotes":""},"categories":[50],"tags":[],"class_list":["post-3177","page","type-page","status-publish","has-post-thumbnail","hentry","category-apis"],"yoast_head":"\nAPI-Sicherheit wird zu h\u00e4ufig untersch\u00e4tzt<\/title>\n<meta name=\"description\" content=\"API-Sicherheit wird zu h\u00e4ufig vernachl\u00e4ssigt. APIs sind Daten\u00fcbertragungspunkte und dadurch anf\u00e4lliger als Hauptsysteme. Sch\u00fctzen Sie sich gegen Angriffe auf Ihre API-Sicherheit\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.appleute.de\/en\/app-development-services\/api-development\/api-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"API-Sicherheit wird zu h\u00e4ufig untersch\u00e4tzt\" \/>\n<meta property=\"og:description\" content=\"API-Sicherheit wird zu h\u00e4ufig vernachl\u00e4ssigt. APIs sind Daten\u00fcbertragungspunkte und dadurch anf\u00e4lliger als Hauptsysteme. Sch\u00fctzen Sie sich gegen Angriffe auf Ihre API-Sicherheit\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.appleute.de\/en\/app-development-services\/api-development\/api-security\/\" \/>\n<meta property=\"og:site_name\" content=\"appleute\" \/>\n<meta property=\"article:modified_time\" content=\"2022-03-26T17:25:45+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.appleute.de\/app-entwicklung-leistungen\/api-programmierung\/api-sicherheit\/\",\"url\":\"https:\/\/www.appleute.de\/app-entwicklung-leistungen\/api-programmierung\/api-sicherheit\/\",\"name\":\"API-Sicherheit wird zu h\u00e4ufig untersch\u00e4tzt\",\"isPartOf\":{\"@id\":\"https:\/\/www.appleute.de\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.appleute.de\/app-entwicklung-leistungen\/api-programmierung\/api-sicherheit\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.appleute.de\/app-entwicklung-leistungen\/api-programmierung\/api-sicherheit\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.appleute.de\/wp-content\/uploads\/2021\/08\/Security-On-amico.svg\",\"datePublished\":\"2021-04-25T17:54:08+00:00\",\"dateModified\":\"2022-03-26T17:25:45+00:00\",\"description\":\"API-Sicherheit wird zu h\u00e4ufig vernachl\u00e4ssigt. APIs sind Daten\u00fcbertragungspunkte und dadurch anf\u00e4lliger als Hauptsysteme. Sch\u00fctzen Sie sich gegen Angriffe auf Ihre API-Sicherheit\",\"breadcrumb\":{\"@id\":\"https:\/\/www.appleute.de\/app-entwicklung-leistungen\/api-programmierung\/api-sicherheit\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.appleute.de\/app-entwicklung-leistungen\/api-programmierung\/api-sicherheit\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.appleute.de\/app-entwicklung-leistungen\/api-programmierung\/api-sicherheit\/#primaryimage\",\"url\":\"https:\/\/www.appleute.de\/wp-content\/uploads\/2021\/08\/Security-On-amico.svg\",\"contentUrl\":\"https:\/\/www.appleute.de\/wp-content\/uploads\/2021\/08\/Security-On-amico.svg\",\"width\":500,\"height\":500,\"caption\":\"API Sicherheit\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.appleute.de\/app-entwicklung-leistungen\/api-programmierung\/api-sicherheit\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Leistungen\",\"item\":\"https:\/\/www.appleute.de\/en\/app-development-services\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"API Programmierung\",\"item\":\"https:\/\/www.appleute.de\/app-entwicklung-leistungen\/api-programmierung\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"API-Sicherheit\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.appleute.de\/#website\",\"url\":\"https:\/\/www.appleute.de\/\",\"name\":\"appleute\",\"description\":\"Agentur f\u00fcr App Entwicklung\",\"publisher\":{\"@id\":\"https:\/\/www.appleute.de\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.appleute.de\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.appleute.de\/#organization\",\"name\":\"appleute\",\"url\":\"https:\/\/www.appleute.de\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.appleute.de\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.appleute.de\/wp-content\/uploads\/2021\/01\/output-onlinepngtools-1.png\",\"contentUrl\":\"https:\/\/www.appleute.de\/wp-content\/uploads\/2021\/01\/output-onlinepngtools-1.png\",\"width\":300,\"height\":300,\"caption\":\"appleute\"},\"image\":{\"@id\":\"https:\/\/www.appleute.de\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The importance of API security is too often underestimated","description":"API security is too often neglected. APIs are data transfer points and therefore more vulnerable than main systems. Protect against attacks on your API security","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.appleute.de\/en\/app-development-services\/api-development\/api-security\/","og_locale":"en_US","og_type":"article","og_title":"API-Sicherheit wird zu h\u00e4ufig untersch\u00e4tzt","og_description":"API-Sicherheit wird zu h\u00e4ufig vernachl\u00e4ssigt. APIs sind Daten\u00fcbertragungspunkte und dadurch anf\u00e4lliger als Hauptsysteme. Sch\u00fctzen Sie sich gegen Angriffe auf Ihre API-Sicherheit","og_url":"https:\/\/www.appleute.de\/en\/app-development-services\/api-development\/api-security\/","og_site_name":"appleute","article_modified_time":"2022-03-26T17:25:45+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.appleute.de\/app-entwicklung-leistungen\/api-programmierung\/api-sicherheit\/","url":"https:\/\/www.appleute.de\/app-entwicklung-leistungen\/api-programmierung\/api-sicherheit\/","name":"The importance of API security is too often underestimated","isPartOf":{"@id":"https:\/\/www.appleute.de\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.appleute.de\/app-entwicklung-leistungen\/api-programmierung\/api-sicherheit\/#primaryimage"},"image":{"@id":"https:\/\/www.appleute.de\/app-entwicklung-leistungen\/api-programmierung\/api-sicherheit\/#primaryimage"},"thumbnailUrl":"https:\/\/www.appleute.de\/wp-content\/uploads\/2021\/08\/Security-On-amico.svg","datePublished":"2021-04-25T17:54:08+00:00","dateModified":"2022-03-26T17:25:45+00:00","description":"API security is too often neglected. APIs are data transfer points and therefore more vulnerable than main systems. Protect against attacks on your API security","breadcrumb":{"@id":"https:\/\/www.appleute.de\/app-entwicklung-leistungen\/api-programmierung\/api-sicherheit\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.appleute.de\/app-entwicklung-leistungen\/api-programmierung\/api-sicherheit\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.appleute.de\/app-entwicklung-leistungen\/api-programmierung\/api-sicherheit\/#primaryimage","url":"https:\/\/www.appleute.de\/wp-content\/uploads\/2021\/08\/Security-On-amico.svg","contentUrl":"https:\/\/www.appleute.de\/wp-content\/uploads\/2021\/08\/Security-On-amico.svg","width":500,"height":500,"caption":"API Sicherheit"},{"@type":"BreadcrumbList","@id":"https:\/\/www.appleute.de\/app-entwicklung-leistungen\/api-programmierung\/api-sicherheit\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Leistungen","item":"https:\/\/www.appleute.de\/en\/app-development-services\/"},{"@type":"ListItem","position":2,"name":"API Programmierung","item":"https:\/\/www.appleute.de\/app-entwicklung-leistungen\/api-programmierung\/"},{"@type":"ListItem","position":3,"name":"API-Sicherheit"}]},{"@type":"WebSite","@id":"https:\/\/www.appleute.de\/#website","url":"https:\/\/www.appleute.de\/","name":"appleute","description":"App development agency","publisher":{"@id":"https:\/\/www.appleute.de\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.appleute.de\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.appleute.de\/#organization","name":"appleute","url":"https:\/\/www.appleute.de\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.appleute.de\/#\/schema\/logo\/image\/","url":"https:\/\/www.appleute.de\/wp-content\/uploads\/2021\/01\/output-onlinepngtools-1.png","contentUrl":"https:\/\/www.appleute.de\/wp-content\/uploads\/2021\/01\/output-onlinepngtools-1.png","width":300,"height":300,"caption":"appleute"},"image":{"@id":"https:\/\/www.appleute.de\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.appleute.de\/en\/wp-json\/wp\/v2\/pages\/3177","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.appleute.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.appleute.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.appleute.de\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.appleute.de\/en\/wp-json\/wp\/v2\/comments?post=3177"}],"version-history":[{"count":0,"href":"https:\/\/www.appleute.de\/en\/wp-json\/wp\/v2\/pages\/3177\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/www.appleute.de\/en\/wp-json\/wp\/v2\/pages\/1618"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.appleute.de\/en\/wp-json\/wp\/v2\/media\/5448"}],"wp:attachment":[{"href":"https:\/\/www.appleute.de\/en\/wp-json\/wp\/v2\/media?parent=3177"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.appleute.de\/en\/wp-json\/wp\/v2\/categories?post=3177"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.appleute.de\/en\/wp-json\/wp\/v2\/tags?post=3177"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}