Close
  • Latest News
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Logo
Logo
  • Latest News
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Cloud
    • Cloud
    • Cybersecurity

    Ping Identity Acquires Elastic Beam for AI-Powered API Security

    By
    David Needle
    -
    June 26, 2018
    Share
    Facebook
    Twitter
    Linkedin
      Ping.Identity.logo

      APIs, the software that lets applications talk to each other, are becoming increasingly important in this era of cloud and mobile computing. But identity provider Ping Identity argues APIs (application programming interfaces) are also at risk of being compromised and plans to release a solution based on technology from its recent purchase of Elastic Beam, a company that’s been developing an AI-powered platform to protect APIs.

      “Elastic Beam really pioneered the use of machine learning and AI for the security of APIs, which I believe are the foundation of everything we are doing in software,” Andre Durand, CEO of Ping Identity, told eWEEK. “All the crown jewels of what’s being developed is programmatically exposed through APIs. There is decent protection as far as access to APIs, but more is needed to make sure hackers are not getting in behind our identity systems.”

      Before the acquisition, Elastic Beam, which has been in stealth mode the past three years, had already built a hybrid cloud software solution that used AI and behavior expertise to detect and automatically stop threats that use APIs to gain control of systems and data. Ping said it will use the new technology in a system that enables businesses to automatically recognize and respond to rapidly changing, dynamic attacks that target API vulnerabilities.

      APIs Need Specialized Security

      “Today we typically don’t really know who is accessing an API, whether it’s some guy in the company’s lab or someone from the outside,” Bernard Harguindeguy, founder and CEO of Elastic Beam, told eWEEK. “We built this platform to give detailed tracking and an audit trail of every API activity while also recognizing threats and blocking them.”

      Analyst Garrett Bekker of 451 Research said Ping’s move is timely.

      “APIs are a big concern because we are in the API economy, where everyone has multiple APIs and there are a lot of unknown interdependencies,” Bekker told eWEEK. “It’s a new attack vector that we don’t have a good handle on as an industry.”

      Bekker thinks Ping will leverage the analytics and AI expertise it gained from the Elastic Beam purchase to offer a single sign-on from an identity portal that has all the apps anyone in the company is allowed to access.

      “From there, all activity is monitored starting with a baseline of what’s considered normal activity, but when something looks weird, like someone in engineering accessing an application they never use, the system might generate a check on that,” said Bekker.

      More Control Options for Users

      Harguindeguy said the system will offer customers control as to how it handles actions that might pose a privacy or security threat.

      “Also, once we recognize an attack pattern we can create a honeypot to when the attacker is online and make sure he or she is blocked from doing anything,” Harguindeguy said. “In most cases, no one knows what’s going on with their API traffic. We aim to bring visibility to this so you won’t have the situation you have today where months later a company might realize, ‘Oh! Someone accessed an account and a lot of data is missing.’”

      Ping hosts the Identiverse conference (previously the Cloud Identity Summit) taking place in Boston this week, where Durand is scheduled to announce the news as part of his June 26 keynote. He said a goal of the new Ping platform is to use machine learning and AI to monitor user behavior and assess risk beyond the obvious examples of someone trying to unlawfully withdraw funds or change records.

      “For example, as the CEO I have access to all kinds of financial records I never use, but if I did, who is watching what I do? We want to be able to monitor behavior and determine the risk if it’s something the system has never seen before,” said Durand. “That requires a level of intelligence and a lot of data, which we now have.”

      PingIntelligence for APIs is currently in private beta and is scheduled to be generally by the end of this summer.

      David Needle
      Based in Silicon Valley, veteran technology reporter David Needle covers mobile, bi g data, and social media among other topics. He was formerly News Editor at Infoworld, Editor of Computer Currents and TabTimes and West Coast Bureau Chief for both InformationWeek and Internet.com.

      MOST POPULAR ARTICLES

      Cybersecurity

      Visa’s Michael Jabbara on Cybersecurity and Digital...

      James Maguire - May 17, 2022 0
      I spoke with Michael Jabbara, VP and Global Head of Fraud Services at Visa, about the cybersecurity technology used to ensure the safe transfer...
      Read more
      Cloud

      Yotascale CEO Asim Razzaq on Controlling Multicloud...

      James Maguire - May 5, 2022 0
      Asim Razzaq, CEO of Yotascale, provides guidance on understanding—and containing—the complex cost structure of multicloud computing. Among the topics we covered:  As you survey the...
      Read more
      Big Data and Analytics

      GoodData CEO Roman Stanek on Business Intelligence...

      James Maguire - May 4, 2022 0
      I spoke with Roman Stanek, CEO of GoodData, about business intelligence, data as a service, and the frustration that many executives have with data...
      Read more
      Applications

      Cisco’s Thimaya Subaiya on Customer Experience in...

      James Maguire - May 10, 2022 0
      I spoke with Thimaya Subaiya, SVP and GM of Global Customer Experience at Cisco, about the factors that create good customer experience – and...
      Read more
      IT Management

      Intuit’s Nhung Ho on AI for the...

      James Maguire - May 13, 2022 0
      I spoke with Nhung Ho, Vice President of AI at Intuit, about adoption of AI in the small and medium-sized business market, and how...
      Read more
      Logo

      eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site’s focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Advertisers

      Advertise with TechnologyAdvice on eWeek and our other IT-focused platforms.

      Advertise with Us

      Menu

      • About eWeek
      • Subscribe to our Newsletter
      • Latest News

      Our Brands

      • Privacy Policy
      • Terms
      • About
      • Contact
      • Advertise
      • Sitemap
      • California – Do Not Sell My Information

      Property of TechnologyAdvice.
      © 2021 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×