Abstract:System-to-system communication via Application Programming Interfaces (APIs) plays a pivotal role in the seamless interaction among software applications and systems for efficient and automated service delivery. APIs facilitate the exchange of data and functionalities across diverse platforms, enhancing operational efficiency and user experience. However, this also introduces potential vulnerabilities that attackers can exploit to compromise system security, highlighting the importance of identifying and mitigating associated security risks. By examining the weaknesses inherent in these APIs using security open-intelligence catalogues like CWE and CAPEC and implementing controls from NIST SP 800-53, organizations can significantly enhance their security posture, safeguarding their data and systems against potential threats. However, this task is challenging due to evolving threats and vulnerabilities. Additionally, it is challenging to analyse threats given the large volume of traffic generated from API calls. This work contributes to tackling this challenge and makes a novel contribution to managing threats within system-to-system communication through API calls. It introduces an integrated architecture that combines deep-learning models, i.e., ANN and MLP, for effective threat detection from large API call datasets. The identified threats are analysed to determine suitable mitigations for improving overall resilience. Furthermore, this work introduces transparency obligation practices for the entire AI life cycle, from dataset preprocessing to model performance evaluation, including data and methodological transparency and SHapley Additive exPlanations (SHAP) analysis, so that AI models are understandable by all user groups. The proposed methodology was validated through an experiment using the Windows PE Malware API dataset, achieving an average detection accuracy of 88%. The outcomes from the experiments are summarized to provide a list of key features, such as FindResourceExA and NtClose, which are linked with potential weaknesses and related threats, in order to identify accurate control actions to manage the threats.

Demystifying API misuses in deep learning applications

API-misuse detection driven by fine-grained API-constraint knowledge graph

An Empirical Study of API Misuses of Data-Centric Libraries

KGAMD: An API-Misuse Detector Driven by Fine-Grained API-Constraint Knowledge Graph

A Large-scale Study on API Misuses in the Wild

An Empirical Study on API-Misuse Bugs in Open-Source C Programs

How Dynamic Features Affect API Usages? an Empirical Study of API Misuses in Python Programs

APIReal: an API Recognition and Linking Approach for Online Developer Forums

A Systematic Evaluation of Static API-Misuse Detectors

API Misuse Detection An Immune System inspired Approach

Adoption of Deep-Learning Models for Managing Threat in API Calls with Transparency Obligation Practice for Overall Resilience

DeepDir: a Deep Learning Approach for API Directive Detection

API Misuse Detection in C Programs: Practice on SSL APIs.

Python API Misuse Mining and Classification Based on Hybrid Analysis and Attention Mechanism

DMalNet: Dynamic malware analysis based on API feature engineering and graph learning

Exploring Automatic Cryptographic API Misuse Detection in the Era of LLMs

Demystifying Application Programming Interfaces (APIs): Unlocking the Power of Large Language Models and Other Web-based AI Services in Social Work Research

An Android Malware Detection Method Using Deep Learning Based on API Calls

Understanding Bugs in Multi-Language Deep Learning Frameworks

Toward Understanding Deep Learning Framework Bugs

DocTer: Documentation Guided Fuzzing for Testing Deep Learning API Functions