INTERFACE by apidays 2023 - Identifying Business Risks from API Legal Agreements, Baljeet Malhotra, TeejLab

INTERFACE by apidays 2023
APIs for a “Smart” economy. Embedding AI to deliver Smart APIs and turn into an exponential organization
June 28 & 29, 2023

Identifying Business Risks from API Legal Agreements
Baljeet Malhotra, Founder & CEO TeejLab Inc.

------

Check out our conferences at https://www.apidays.global/

Do you want to sponsor or talk at one of our conferences?
https://apidays.typeform.com/to/ILJeAaV8

Learn more on APIscene, the global media made by the community for the community:
https://www.apiscene.io

Explore the API ecosystem with the API Landscape:
https://apilandscape.apiscene.io/

Transcript

1. 29th June 2023 Baljeet Malhotra, PhD Founder & CEO | TeejLab Inc. API Legal Agreements Managing Business Risks for API Economy Presented at: API Days | INTERFACE © 2023 TeejLab Inc.
3. About the Speaker ©2023 TeejLab Inc. Baljeet Malhotra, PhD Founder & CEO TeejLab • VP Research, Black Duck Software (acquired by Synopsys for $565MM) • Research Director at SAP; Computer Scientist (EOS Lab) Software Engineer (Tech Mahindra) • PhD (Univ. of Alberta, Canada), PDF (NUS, Singapore) • Global Young Scientist (Singapore); NSERC Scholar (Canada) • Adjunct Professor at the Universities of British Columbia, Victoria, UNBC, and New York Institute of Technology Contact LinkedIn: baljeetmalhotra Email: info@teejlab.com
4. API is common glue of most web traffic, following Metcalf’s law 83% of internet traffic via APIs vs 17% HTML! Source: Akamai 2019 Enterprise moving rapidly towards monetizing Digital Assets via APIs Smart devices, IoTs, AI/ML based economy primarily driven via APIs APIs help enterprises to provide automated intelligent solutions. APIs must be Discovered, Secured and Governed systemically. 6/29/2023 © 2023 TeejLab Inc. 3 Global API Economy Web Sites Web Services (APIs) 0 50,000,000 100,000,000 150,000,000 200,000,000 Web Sites Web Services APIs are expected to grow into billions
5. Global API Repositories 6/29/2023 © 2023 TeejLab Inc. 4 55.5K APIs 40K APIs 24.4K APIs 16.8K APIs API Discovery (TeejLab Inc.) RapidAPI (R Software Inc.) ProgmmableWeb (MuleSoft Inc.) World’s Largest API Repositories Built at a Global Scale Currently tracking thousands of APIs (millions or billions in the near future) from thousands of vendors, industries and geographies, which forms the basis of all TeejLab products & services. Postman (Postman Inc.) - Since 2019 - Since 2015 - Since 2005 - Since 2014 1 M + Security/Legal Operational Info No Security/Legal Operational Info No Security/Legal Operational Info No Security/Legal Operational Info
6. Why Track APIs at a Global Scale ? 6/29/2023 © 2023 TeejLab Inc. 5 Provide Source Code (static) and Network (dynamic) Analysis tools for API Discovery Provide Comprehensive API Governance solution driven by Global API Economy To Leverages upon lient’s investments in existing API technologies To provide end- to-end API Lifecycle management to API Consumers, API Producers Provide proactive API Legal & Operational Risk Management
7. Metrics for API Management 6/29/2023 © 2022 TeejLab Inc. 6 API Inventory API Category API Age API Functions API Vulnerabilities API Trust API Agreements API Quality API Health API Risks
8. API Legal Agreements 6/28/2023 © 2023 TeejLab Inc. 7  Privacy Policy/Statement  Data collection and use approach in a specific country. Also what type of information is collected, and how it’s used, and whether it’s shared or sold.  Global Privacy Policy/Statement  Data collection and use approach(es) in a global context  API Terms of Use  API's allow software programs to to exchange data in an easy and secure way.  A legal agreement between API producer and consumer for API usage.  Platform Policy  A platform refers to a digital ecosystem that uses the internet to connect individuals, processes and tools to facilitate interactions between them.  Examples: Facebook, Uber, Airbnb
9. Data Governance - Challenges 6/28/2023 © 2023 TeejLab Inc. 8
10. Privacy and Legal Frameworks 6/29/2023 © 2023 TeejLab Inc. 9  Federal Privacy-Related Laws (USA)  The E-Government Act of 2002: Privacy Impact Assessment (PIA)  The Financial Modernization Act of 1999: The Gramm-Leach-Bliley Act  The Children’s Online Privacy Protection Act of 1998: Children under 13 years  The Health Insurance Portability and Accountability Act of 1996: HIPPA  The Telephone Consumer Protection Act of 1986: Do No Call List  The Privacy Act of 1974: Practices for Personal Identifiable Information  The Family Educational Rights and Privacy Act of 1974: Education Records  Records, Computers and the Rights of Citizens: 1973 Report of the HEW Committee  State Privacy Laws (USA)  The California Consumer Privacy Act of 2020: Handling PII in the State of California  The State Data Breach Notification Laws of 2003: Handling unutherized access of data.
11. Case Study – OpenAI 6/29/2023 © 2023 TeejLab Inc. 10
12. 6/29/2023 © 2023 TeejLab Inc. 11
13. Case Study – Facebook 6/28/2023 © 2023 TeejLab Inc. 12
14. 6/29/2023 © 2023 TeejLab Inc. 13
15. 6/29/2023 © 2023 TeejLab Inc. 14
16. 6/29/2023 © 2023 TeejLab Inc. 15
17. 6/29/2023 © 2023 TeejLab Inc. 16  Thousands of APIs  Which teams/products use which APIs  One team/product may use multiple APIs  One API may be used in/by multiple products/team  Hundreds of API Providers  Vendors may provide free or commercial APIs  Which APIs are more secure and compliant  Terms of Use may change at any time  Tens of API Tools and Processes  Manage 100s of APIs specific test cases  CIS top-20, OWASP top-10 security tests  PCI, SOC2, HIPPA, ISO27001 compliance Invisibility Scalability Usability API Legal Agreements - Challenges
18. API Agreement Management Some Hands-on of Scenarios TeejLab Community Portal: https://apidiscovery.teejlab.com/api-community-manager/ 6/29/2023 17 © 2022 TeejLab Inc.
19. About the Speaker ©2023 TeejLab Inc. Baljeet Malhotra, PhD Founder & CEO TeejLab • VP Research, Black Duck Software (acquired by Synopsys for $565MM) • Research Director at SAP; Computer Scientist (EOS Lab) Software Engineer (Tech Mahindra) • PhD (Univ. of Alberta, Canada), PDF (NUS, Singapore) • Global Young Scientist (Singapore); NSERC Scholar (Canada) • Adjunct Professor at the Universities of British Columbia, Victoria, UNBC, and New York Institute of Technology Contact LinkedIn: baljeetmalhotra Email: info@teejlab.com