Automatically discovering API endpoints and generating schemas using machine learning
Mar 15, 2023John Cosgrove, Jan Rüth, Henry Clausen
Summary
Introduced machine learning-based API Discovery that continuously identifies all API traffic without requiring session identifiers, overcoming limitations of previous methods. Developed Schema Learning to automatically generate OpenAPI formatted schemas for discovered endpoints in real-time, enabling schema validation for API protection. The ML model uses features from HTTP request/response samples and is trained using the CatBoost library. Feature extraction and model scoring are performed in Rust.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack