| CPC H04L 63/1408 (2013.01) [H04L 63/1441 (2013.01)] | 20 Claims |

|
1. A method comprising:
receiving incoming traffic to and outgoing traffic from an application programming interface (“API”) comprising a plurality of functions that are remotely accessed by a plurality of endpoints;
generating tags for incoming packets from the plurality of endpoints to the API and for outgoing packets from the API to the plurality of endpoints based on different context associated with the incoming packets and the outgoing packets;
comparing different sets of the tags against different modeled combinations of context that represent a proper or improper usage of the API;
determining that a particular set of tags from the different sets of the tags corresponds to a modeled combination of context that represents an improper usage of the API; and
securing the API from one or more endpoints associated with the particular set of tags.
|