APIsecure 2023 - The world's first and only API security conference March 14 & 15, 2023 Machine Learning in API Security Sagar Bhure, Security Engineer, F5 ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

1. 1

2. Technical Expertise
PERSONAL PROFILE
ACHIEVEMENTS
EDUCATION
HOBBIES
CONTACT INFO
.
Master of Technology @IIT Kanpur 2017
Bachelor of Technology @IIT Kanpur 2016
Research Intern @University of Tokyo 2015
LinkedIn: Sagar Bhure
email: sagar.bhure@owasp.org
Website: www.sagarbhure.com
Aerial photography
Travel and Culture
and many more ….
SAGAR BHURE
“You are an essential ingredient in our ongoing effort to
reduce Security Risk” ― Kirsten Manthorne
Layer 7 Protocol (DNS, HTTP …)
Cryptography in Network security
Android Application Security
Computer Vision, Artificial Intelligence
MERN, RPA, HW Security …
Two filed patent @USPTO
Project Leader at OWASP MLSVS
Former Linux Foundation Scholar
OWASP CFP/CPT Reviewer
$whoami

3. Overview of ML,
API Security Threat
ML for API Security
Demo
Best Practices
Q&A
Disclaimer: Opinions expressed in the following slides are solely based on opinion and does not simulate real world
Presenter – Sagar Bhure
3

4. ML Overview
4

5. ML Overview, Why ML?

6. Traditional API Security

7. Adding ML to API Security

8. Type of API Security Threat
8
• Bot attacks targeting APIs
Bot Attack
•Injection attacks such as SQL injection and cross-site
scripting(xss)
Injection attacks
•Authentication attacks such as brute-force & credential stuffing
Authentication Attack
•API-specific attacks such as scraping and abuse
API Specific Attack
•Breaches of data privacy and confidentiality
Data privacy and
confidentiality

9. Applying ML to API Security
9

10. DEMO
Good Queries Bad Queries
Disclaimer: The Demo in this slide is just for proof-of concept
and does not imply real world use case
10

11. DEMO - Code Overview
11

12. Best Practices – ML for APISEC
12

13. Journals & Books
13