We will look at how API security works with MuleSoft including the API development lifecycle and implementing security policies on a live API from Anypoint Platform API Manager. We will also display the monitoring capabilities from API Manager and what a policy violation looks like.

Then, we will have some fun by simulating hacks on our own API. We will simulate some common attacks and how API Manager and/or a WAF can block these common attacks.

From there, we will dive even deeper by simulating very advanced attacks like OAuth token hijacking, data theft, and DoS attacks that fly under the SLA radar. This is where we will implement an AI engine like PingIntelligence’s Anypoint integration custom API policy to show how a MuleSoft API can use an AI software like PingIntelligence to discover and model normal behavior for your APIs to block and report on advanced attacks.