Deter spam and unwanted attacks on APIs

[mittalyashu]

How to prevent attacks to APIs from spam, DDOS attacks, etc?

Things to consider:

• Are we allowing use of APIs outside of client-side?
• Any use-cases where LogChimp site owner want to use APIs (only).

Possible solutions

• Max number of allowed requests per second
• Black listing

Resources

• REST Security Cheat Sheet
• API management
• API Security