API ua avea ma ivi tua o le tamaoaiga numera, ae ua avea foi ma se tasi o vete autu mo cyberattacks. I Pasila, o kamupani taʻitasi na mafatia i le averesi o le 2,600 taumafaiga faʻalavelave i le vaiaso i le kuata muamua o le 2025, e tusa ai ma le Check Point Research lipoti (Iulai/25), o se faʻaopoopoga 21% faʻatusatusa i le vaitaimi tutusa o le tausaga talu ai. O lenei faʻataʻitaʻiga e tuʻu ai le tuʻufaʻatasiga faʻatasi i le totonugalemu o talanoaga saogalemu.
A aunoa ma le pulega, faʻamalamalama lelei konekarate, ma faʻataʻitaʻiga talafeagai, e foliga mai o mea sese laiti e mafai ona faʻaitiitia ai siaki e-commerce, faʻalavelaveina gaioiga Pix, ma faʻafefeteina faʻalavelave faʻatasi ma paaga. O le mataupu a Claro, mo se faʻataʻitaʻiga, o loʻo faʻaalia faʻamaonia, pakete S3 ma ogalaau ma faʻasalalauga, faʻapea foʻi ma le avanoa i faʻamaumauga ma atinaʻe AWS na tuʻuina atu mo le faʻatau atu e se tagata taʻavale, o loʻo faʻaalia ai pe faʻafefea ona faʻaletonu le tuʻufaʻatasia e mafai ona faʻafefe uma le le faalauaiteleina ma le avanoa o auaunaga ao.
Ae ui i lea, e leʻo foia le puipuiga o le API e ala i le mauaina o meafaigaluega tuʻufua. O le mea autu o le faʻatulagaina o faiga faʻavae saogalemu mai le amataga. mamanu-muamua auala , faʻaaogaina faʻamatalaga e pei o OpenAPI, faʻatagaina mo le faʻamaoniaina o konekarate ma le faʻavaeina o se faavae mautu mo iloiloga saogalemu e aofia ai le faʻamaoni, faʻatagaga, ma le faʻaogaina o faʻamatalaga maaleale. A aunoa ma lenei faʻavae, soʻo se faʻamalosia mulimuli ane e foliga mai e palliative.
O suʻega faʻapitoa, faʻaopoopo i le avea ma laina e sosoo ai o le puipuiga, faia suʻega saogalemu API ma meafaigaluega e pei ole OWASP ZAP ma Burp Suite, faʻaauau pea ona faʻatupuina faʻalavelave faʻaletonu e pei o tui, faʻamaoniga faʻamaonia, talosaga faʻatapulaʻa faʻatapulaʻa, ma tali sese e leʻi mafaufauina. E faʻapea foʻi, suʻega o uta ma faʻalavelave faʻamautinoa o loʻo tumau pea le tuʻufaʻatasia taua i lalo o le mamafa o feoaiga, poloka le avanoa o bots leaga, e nafa ma se vaega tele o fefaʻatauaʻiga i luga ole laiga, fetuutuunai faiga e ala i le saturation.
Ua mae'a le taamilosaga i le gaosiga, lea e taua ai le mata'ituina. Fuafuaga mata'ituina e pei o le taofiofia, fua o mea sese i le pito i'uga , ma le feso'ota'iga telefoni i le va o faiga e mafai ai ona vave iloa fa'aletonu. O lenei vaʻaia e faʻapuupuuina le taimi tali, puipuia faʻaletonu faʻapitoa mai le liliu atu i faʻalavelave faʻalavelave poʻo faʻalavelave faʻaogaina mo tagata osofaʻi.
Mo kamupani o loʻo faʻagaoioia i le e-fefaʻatauaʻiga, auaunaga tau tupe, poʻo vaega taua, o le le amanaʻiaina o le tuʻufaʻatasiga faʻapipiʻi e mafai ona maua ai tau tele i tupe maua leiloa, faʻasalaga faʻatonutonu, ma faʻaleagaina igoa. Amata, aemaise lava, o loʻo feagai ma le luʻitau faʻaopoopo o le faapaleniina o le saoasaoa o le tuʻuina atu ma le manaʻomia mo faʻatonuga malosi, ona o lo latou faʻatauva e faʻalagolago i mea fou ma le faʻamaoni.
O pulega API e maua foi le taua i le malamalama o tulaga faava o malo, e pei o le ISO/IEC 42001:2023 (poʻo le ISO 42001), lea e faʻavaeina ai manaʻoga mo faiga faʻatautaia atamai. E ui lava e le o faʻasino saʻo API, e talafeagai pe a faʻaalia pe faʻaaogaina e API faʻataʻitaʻiga AI, aemaise lava i tulaga faʻatonutonu. I lenei fa'ata'ita'iga, o faiga sili ona lelei e fautuaina e le OWASP API Security mo fa'ata'ita'iga fa'ata'ita'iga gagana e maua fo'i le malosi. O nei fa'ailoga e ofoina atu auala fa'amoemoe mo kamupani o lo'o taumafai e fa'afetaui le gaosiga ma le fa'atulafonoina ma le saogalemu.
I se faʻataʻitaʻiga ua avea faʻatasiga ma mea taua mo pisinisi faʻatekinolosi, API malupuipuia o API ia e faʻaauau ona suʻeina ma mataʻituina. O le tuʻufaʻatasia o mamanu faʻatulagaina, saogalemu faʻaautomatika ma faʻataʻitaʻiga faʻatinoga, ma le mataʻituina o taimi moni e le gata ina faʻaitiitia ai le osofaʻiga ae faʻatupuina ai foʻi ni 'au sili atu. O le ese'esega i le va o le fa'agaioiga puipuia po'o le fa'afoliga e mafai ona fa'amalamalamaina le ola i totonu o se si'osi'omaga ua fa'atupula'ia fa'amata'u.
* Mateus Santos o le CTO ma le paaga i Vericode. Faatasi ai ma le sili atu i le 20 tausaga o le poto masani i faiga i luga o le itu tau tupe, eletise, ma fesoʻotaʻiga, o loʻo ia te ia le tomai i le tusiata, auʻiliʻiliga, ma le faʻaleleia atili o le faʻatinoga o faiga, gafatia, ma avanoa. E nafa ma tekinolosi a le kamupani, o Mateus e taʻitaʻia faʻafouga ma le atinaʻeina o fofo faʻapitoa faʻapitoa.
