Detecting API abuse automatically using sequence analysis
Mar 15, 2023John Cosgrove, Peter Foster

Summary
This post introduces Cloudflare Sequence Analytics for APIs, a new feature within API Gateway. It details the concept of API request sequences, explains their importance for security by enabling positive security models, and outlines the technical challenges of identifying and analyzing these sequences at scale. The post describes the 'Correlation Score' metric used to identify important sequences and shows a dashboard screenshot of the new functionality. It also previews upcoming features like sequence precedence rules.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack