3. Monitor API Activity for Unauthorized Access and Abuse

Even the most secure APIs can be vulnerable to unauthorized access if they aren’t monitored for suspicious activity. For example, an attacker could create a fake API key and use it to send requests that allow him or her to bypass authentication checks and gain full control of the system under attack. Organizations should monitor their APIs for any unusual patterns in traffic volume or behavior that might indicate malicious activity. They should also set up alerts that notify IT staff when errors occur during transactions with external systems, which may indicate a breach is underway due to compromised credentials or other factors
https://t.co/4piZRsiUkk