a good thing!
Allowing rapid delivery and secure access to data to your apps through APIs presents significant security challenges. As a large corporation that has grown through acquisitions and evolved their infrastructure over the years, NOV Inc. has a huge legacy debt in the guise of a large ERP footprint, different ERP instances, data spread across multiple data lakes and data houses, and systems, applications and APIs in different data centers throughout the globe. The organization was using static threat checks to protect APIs, but the technique was neither completely secure nor easy to use, and needed to be augmented with a self-learning system that can understand threats based on behavior. NOV Inc. also lacked comprehensive tracking for audit and forensic reports.
NOV Inc. was challenged to find a solution that seamlessly and securely supports their API needs with regards to both their legacy infrastructure and their newer infrastructures in the cloud, enabling them to centrally manage the lifecycle of an API so that the APIs can integrate into various digital delivery channels offered to customers and partners. In addition, NOV Inc. needed to be able to deploy and implement the solution with minimal effort on the part of their developers and digital integrators.
NOV Inc. chose the powerful combination of PingIntelligence and Axway for APIs, an API security and governance solution that provides a unified view of API activity across the entire enterprise for centralized monitoring and reporting. In addition, PingIntelligence for APIs uses artificial intelligence to learn traffic behaviors to automatically detect and block threats to enhance an organization’s security posture. The “single pane of glass” allows NOV Inc. to centralize AI analytics for API activity across all data centers and clouds, enabling them to differentiate between good and bad traffic, catch bad API implementations, determine whether partners are abiding by agreements, and detect and block suspicious behaviors.
The corporation deployed PingIntellience for APIs in sideband integration with the Axway Amplify API Management Platform. The Axway solution offers a layer of API security through access control, rate limiting and network privacy, while the Ping solution extends Axway’s API Gateway with an additional layer of AI-powered traffic tracking and security. The solution was deployed in active/active high availability (HA) configuration across three data centers (two private data centers and one Equinix Data Center) and across two clouds, Azure and AWS.
“Organizations should not take for granted that traditional API-protecting mechanisms will suffice for today's needs,” said Manoj Kona, Director of Corporate Middleware at NOV Inc. “In the past, we used security mechanisms like rate limiting and throttling to secure APIs. But those traditional mechanisms don't suffice. Without the self-learning AI platform to detect the behavior of your callers, you will not be implementing a full-fledged mature API security infrastructure.”
NOV Inc. (NYSE: NOV) delivers technology-driven solutions to empower the global energy industry. For more than 160 years, NOV Inc. has pioneered innovations that enable its customers to safely produce abundant energy while minimizing environmental impact. The energy industry depends on NOV Inc.’s deep expertise and technology to continually improve oilfield operations and assist in efforts to advance the energy transition towards a more sustainable future. NOV Inc. powers the industry that powers the world.
Learn more at www.nov.com
About Axway Amplify
The Amplify API Management Platform helps control the growing complexities of API sprawl and distributed integration across environments, vendors and teams, while leveraging modern patterns around microservices and event-driven architectures. It's the only out-of-the-box solution that lets you manage all your APIs and integrations across all vendors—on-premises or in any cloud—automatically from a central place. Learn more at axway.com.
Learn more at www.ic-axway.com.
More Stories You'll Love
DB Schenker chose Ping Identity to implement risk-based MFA and consolidate IAM.
Gates leveraged Ping’s applications and partnerships to implement a global authentication authority at global scale.
Scotts centralized identity services and increased their security posture by implementing federated single sign-on.
Ping is the extensible platform that Netflix builds all of their identity services on.