Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Gaining Security Context with API Session Data

API attacks don't always occur in a single request, and more sophisticated attacks require additional context. Whether it's account takeover or scraping, understanding the behavior of an attacker across a session is key to accurate detection and effective investigation. Today, organizations often lack the ability to delve into the details of specific API sessions. Data is spread across multiple tools, or simply unavailable. The Wallarm platform allows users to seamlessly navigate between attack detections and the surrounding session data to fully understand the behavior and interactions involved.

Step 1.2. How to identify best targets for fuzzing based on a coverage report

If you want to automate your code analysis to identify the best fuzzing targets, you can do so with CI Fuzz. In the previous video, Khaled demonstrated how CI Fuzz automatically prioritized functions to test. But what if you already have unit or fuzz tests? CI Fuzz can analyze an LCOV coverage report and identify less-covered functions. These functions will now receive higher scores, highlighting them as top targets for new tests.

Step 1. How to automatically identify fuzz testing targets

The first step to start fuzzing is to identify what part of the software you want to fuzz. You definitely want to fuzz the most critical functions/APIs—those that exercise a significant amount of code and trigger key functionalities. However, manually identifying these targets can be time-consuming and challenging. Watch the video to see how CI Fuzz can automatically prioritize functions for fuzzing.

Announcing V11: Advanced Cyber Resilience in the Cloud

Credit where it’s due: Cybercriminals can be quite innovative and resourceful. They know that in order to win, they need sharper tools and better strategies… The same logic should apply to your data protection strategy. Join us for an exclusive live stream as we unveil NAKIVO Backup & Replication v11, our most powerful release yet!