APIs zabaye inkingi yubukungu bwa digitale, ariko kandi zabaye imwe murwego nyamukuru rwibitero byikoranabuhanga. Muri Burezili, buri sosiyete yahuye n’impuzandengo ya 2600 yagerageje kwinjira mu cyumweru mu gihembwe cya mbere cya 2025, nk'uko raporo y’ubushakashatsi bwakozwe na Check Point yabitangaje (Nyakanga / 25), yiyongereyeho 21% ugereranije n’igihe kimwe cy’umwaka ushize. Ibi birashyira urwego rwo kwishyira hamwe hagati yibiganiro byumutekano.
Hatabayeho imiyoborere, amasezerano asobanuwe neza, hamwe nigeragezwa rihagije, amakosa asa nkaho ari mato arashobora kumanura igenzura rya e-ubucuruzi, guhagarika ibikorwa bya Pix, no guhuriza hamwe ibikorwa bikomeye nabafatanyabikorwa. Urugero rwa Claro, kurugero, rwari rufite ibyangombwa byashyizwe ahagaragara, indobo ya S3 ifite ibiti n’ibishushanyo, ndetse no kugera kuri data base hamwe n’ibikorwa remezo bya AWS byashyizwe ahagaragara na hackers, byerekana uburyo kunanirwa kwishyira hamwe bishobora guhungabanya ibanga ndetse no kubona serivisi zicu.
Ariko, kurinda API ntabwo gukemurwa no kubona ibikoresho byihariye. Ingingo nyamukuru nugushiraho inzira yiterambere itekanye kuva mbere. Igishushanyo-cyambere uburyo , ukoresheje ibisobanuro nka OpenAPI, byemerera kwemeza amasezerano no gushiraho urufatiro rukomeye rwo gusuzuma umutekano urimo kwemeza, uruhushya, no gukoresha amakuru yihariye. Hatariho urufatiro, imbaraga zose zikurikiraho zikunda kuba palliative.
Ibizamini byikora, usibye kuba umurongo ukurikiraho wo kwirwanaho, kora ibizamini byumutekano bya API hamwe nibikoresho nka OWASP ZAP na Burp Suite, uhora utanga ibintu byananiranye nka inshinge, kwemeza bypass, gusaba kurenza urugero, hamwe nibisubizo bitunguranye. Mu buryo nk'ubwo, ibizamini byo kwikorera no guhangayika byemeza ko kwishyira hamwe bikomeza guhagarara neza mu muhanda mwinshi, bikabuza amahirwe ya bots mbi, ishinzwe igice kinini cyurugendo rwa interineti, sisitemu yo kubangamira binyuze mu kwiyuzuzamo.
Ukuzenguruka kurangizwa mubikorwa, aho kwitegereza biba ngombwa. Gukurikirana ibipimo nkubukererwe, igipimo cyamakosa kuri buri mpera , hamwe no guhamagarira isano hagati ya sisitemu bituma habaho kumenya hakiri kare ibintu bidasanzwe. Uku kugaragara kugabanya igihe cyo gusubiza, bikarinda kunanirwa tekinike guhinduka mubihe byo hasi cyangwa intege nke zishobora gukoreshwa kubatera.
Ku masosiyete akorera kuri e-ubucuruzi, serivisi z’imari, cyangwa inzego zikomeye, kwirengagiza urwego rw’ubufatanye bishobora kubyara amafaranga menshi mu kwinjiza amafaranga yatakaye, ibihano bigengwa n’ibyangiritse. Gutangiza, byumwihariko, bihura ningorabahizi yinyongera yo kuringaniza umuvuduko wo gutanga no gukenera igenzura rikomeye, kuko irushanwa ryabo riterwa no guhanga udushya no kwizerwa.
Imiyoborere ya API nayo ifite akamaro gakurikije amahame mpuzamahanga, nka ISO / IEC 42001: 2023 (cyangwa ISO 42001), ishyiraho ibisabwa muri sisitemu yo gucunga ubwenge. Nubwo idahuye neza na APIs, biba ngombwa mugihe APIs igaragaje cyangwa ikoresha moderi ya AI, cyane cyane mubijyanye nubuyobozi. Muri iki gihe, imyitozo myiza yasabwe na OWASP API Umutekano kubikorwa byururimi rushingiye kubikorwa nabyo bigira imbaraga. Ibipimo ngenderwaho bitanga inzira zifatika kubigo bishaka guhuza umusaruro no kubahiriza amategeko n'umutekano.
Mubihe aho kwishyira hamwe byabaye ingenzi kubucuruzi bwa digitale, APIs zifite umutekano ni APIs zipimwa kandi zigakurikiranwa. Gukomatanya igishushanyo mbonera, umutekano wikora no kugerageza imikorere, hamwe nigihe cyo kureba ntabwo bigabanya gusa igitero ahubwo binashiraho andi makipe akomeye. Itandukaniro riri hagati yo gukumira no gukumira birashobora gusobanura kubaho mubuzima bugenda bugerwaho n’iterabwoba.
* Mateus Santos ni CTO n'umufatanyabikorwa muri Vericode. Afite uburambe bwimyaka 20 muri sisitemu murwego rwimari, amashanyarazi, n’itumanaho, afite ubuhanga mubyubatsi, gusesengura, no kunoza imikorere ya sisitemu, ubushobozi, no kuboneka. Ashinzwe ikoranabuhanga ryikigo, Mateus ayoboye udushya no guteza imbere ibisubizo bya tekiniki bigezweho.
