API Gateway Threat Detection using Kafka

Node.js Kafka Redis Security

Overview

Designed a hybrid API security architecture combining synchronous gateway enforcement with asynchronous Kafka-based behavioral analysis for real-time threat detection at scale.

View Repository on GitHub

Key Implementations

Threat Analyzers: Implemented independent OWASP API threat analyzers for BOLA (Broken Object Level Authorization), credential stuffing, and sensitive business-flow abuse using sliding-window state tracking.
Asynchronous Analysis: Offloaded heavy behavioral analysis to Kafka streams to ensure the API Gateway remains highly performant and non-blocking for legitimate traffic.
Feedback Loop: Used Redis TTL-based threat flags to create a high-speed feedback loop, enabling the gateway to immediately block or warn on subsequently detected malicious API requests.