DEV Community

Tech Community for Software AG Tech Community

Posted on • Originally published at tech.forums.softwareag.com on

1

Deflector and shield

USS_Enterprise-D_navigational_deflector

Do you know the difference between the deflector and the shield? If so, you can proudly call yourself a Star Trek® fan. Without getting into too much detail, they both serve one purpose, the integrity of the space ship and security of the crew on it. The navigational deflector makes sure the ship travels safely though space, even at warp speed, protecting it from the space debris while the shield established a multi-layer protection field in case of an attack.

Similarly, API Gateways use a threat protection layer to make sure the mediation layer doesn’t have to deal with the network debris also known as unwanted traffic. This layer protects the rest of the gateway against DoS attacks, malicious content, viruses etc. Essentially, nothing suspicious shall pass.

When an API call successfully gets through the protection layer, it’s still subject to API access control and protection policies. The gateway’s mediation layer makes sure the client is authenticated (we know them) and authorized (we allowed them) to use the API. Many other things happen to make sure they use the API in a way it was designed for (validation policies) etc.

Just like the deflector and the shield, these two layers together constitute a holistic API Security solution in API Management. They can additionally be augmented by specialized API security solutions or application security solutions like WAFs.

Shields up! Red alert! :slight_smile:

Read full topic

Billboard image

The Next Generation Developer Platform

Coherence is the first Platform-as-a-Service you can control. Unlike "black-box" platforms that are opinionated about the infra you can deploy, Coherence is powered by CNC, the open-source IaC framework, which offers limitless customization.

Learn more

Top comments (0)

A Workflow Copilot. Tailored to You.

Pieces.app image

Our desktop app, with its intelligent copilot, streamlines coding by generating snippets, extracting code from screenshots, and accelerating problem-solving.

Read the docs

👋 Kindness is contagious

Dive into an ocean of knowledge with this thought-provoking post, revered deeply within the supportive DEV Community. Developers of all levels are welcome to join and enhance our collective intelligence.

Saying a simple "thank you" can brighten someone's day. Share your gratitude in the comments below!

On DEV, sharing ideas eases our path and fortifies our community connections. Found this helpful? Sending a quick thanks to the author can be profoundly valued.

Okay