Read and Download Free eBooks
/
Categories
Browse by category
1,965 books to get lost inYours to read. Yours to keep.
No books found.
Try another title or author.
Try another title or author.
Ramaswamy Chandramouli and Zack Butcher examine how organizations can protect application programming interfaces throughout their development and operation. The report treats APIs as essential connections between enterprise systems and explains why weaknesses at these interfaces can affect the security of an entire service.
Separate discussions identify risks during development, before deployment and at runtime. Basic and advanced controls are related to these stages, with attention to API endpoints, gateways, schemas, keys and the mechanisms used to enforce protection. The report compares implementation options so that security practitioners can connect individual controls with an overall deployment strategy.
Its risk-based approach allows organizations to introduce protections incrementally rather than assume a single configuration fits every system. This is the June 2025 publication incorporating the March 13, 2026 updates, including the change record in Appendix F. The original report retains its technical diagrams, tables, references and detailed recommendations.
Ramaswamy Chandramouli and Zack Butcher. NIST SP 800-228-upd1 (2025), including updates as of March 13, 2026. https://doi.org/10.6028/NIST.SP.800-228-upd1.