Blockchain based security system and method using WAAP/API level management

1 . A blockchain-based security method that is performed by an integrated web security solution (web application and API protection, WAAP) and using WAAP and application programming interface (API) level management, the blockchain-based security method comprising:

receiving an API safety grade check request from the blockchain under a session establishment with the blockchain, wherein, in the checking of the API safety grade, a security level for vulnerability of the API is checked automatically in management API data of the WAAP with a highest level of safety;

receiving an API sample code for WAAP vulnerability testing from the blockchain, wherein the API sample code is a malicious sample code;

calculating a safety grade for the API sample code for WAAP vulnerability testing; and

transmitting information on the API safety grade to the blockchain.

2 . The blockchain-based security method of claim 1 , wherein the WAAP has a level 1 grade indicating the most secure WAAP in terms of security, and the blockchain stores WAAP identification information of the WAAP and a list of APIs with safety grade 1 registered on the WAAP.

3 . The blockchain-based security method of claim 2 , wherein blockchain synchronization with the corresponding WAAPs is completed for the list of APIs at safety grade 1, which is the safest level of security.

4 . The blockchain-based security method of claim 1 , further comprising transmitting information on the API safety grade status including the calculated safety grade to the blockchain.

5 . The blockchain-based security method of claim 4 , wherein the blockchain classifies a WAAP for which the safety grade of the API sample code for WAAP vulnerability testing is calculated as a highest level based on the information on the API safety grade status as a WAAP vulnerable to security and downgrades a level of the WAAP.

6 . The blockchain-based security method of claim 4 , wherein the blockchain classifies a WAAP for which the safety grade of the API sample code for WAAP vulnerability testing is calculated as a lowest level based on the information on the API safety grade status as a stable WAAP and upgrades a level of the WAAP.

7 . The blockchain-based security method of claim 1 , further comprising:

requesting a test of the WAAP from the blockchain;

receiving an API sample code safety grade confirmation request from the blockchain; and

transmitting API safety grade status information including confirmation information on the API safety grade to the blockchain.

8 . A blockchain-based security method that is performed by an integrated web security solution (web application and API protection, WAAP) and using WAAP and application programming interface (API) level management, the blockchain-based security method comprising:

requesting a test of a WAAP from the blockchain through a session established with the blockchain;

receiving an API sample code safety grade confirmation request from the blockchain; and

performing a self-vulnerability test on the API sample code received from the blockchain;

calculating an API safety grade after performing the vulnerability test; and

transmitting API safety grade status information including check information on the API safety grade to the blockchain, wherein the blockchain classifies a WAAP for which the safety grade of the API sample code for WAAP vulnerability testing is calculated as a highest level based on the information on the API safety grade status as a WAAP vulnerable to security and downgrades a level of the WAAP, or

the blockchain classifies a WAAP for which the safety grade of the API sample code for WAAP vulnerability testing is calculated as a lowest level based on the information on the API safety grade status as a stable WAAP and upgrades a level of the WAAP.

9 . The blockchain-based security method of claim 8 , further comprising, before requesting the test of the WAAP, upgrading a function of the WAAP automatically with administrator authority of the WAAP.

10 . A blockchain-based security system using an integrated web security solution (web application and API protection, WAAP) and application programming interface (API) level management, the blockchain-based security system comprising:

a memory; and

at least one processor connected to the memory and executing a program including at least one command,

wherein, by the at least one command, the processor allows the WAAP to receive an API safety grade confirmation request from the blockchain under a session establishment with the blockchain, confirm the API safety grade, and transmit check information on the API safety grade to the blockchain,

wherein the processor further performs receiving an API sample code for WAAP vulnerability testing from the blockchain, calculating a safety grade for the API sample code for WAAP vulnerability testing, and transmitting information on an API safety grade status including the calculated safety grade to the blockchain.

11 . The blockchain-based security system of claim 10 , wherein the WAAP has a level 1 grade indicating the most secure WAAP in terms of security, the blockchain stores WAAP identification information of the WAAP and a list of APIs with safety grade 1 registered on the WAAP, and the blockchain completes blockchain synchronization with the corresponding WAAPs targeting the list of APIs with a highest level of safety grade of the security.

12 . The blockchain-based security system of claim 10 , wherein the blockchain classifies a WAAP for which the safety grade of the API sample code for WAAP vulnerability testing is calculated as a highest level based on the information on the API safety grade status as a WAAP vulnerable to security and downgrades a level of the WAAP.

13 . The blockchain-based security system of claim 10 , wherein the blockchain classifies a WAAP for which the safety grade of the API sample code for WAAP vulnerability testing is calculated as a lowest level based on the information on the API safety grade status as a stable WAAP and upgrades a level of the WAAP.

14 . The blockchain-based security system of claim 10 , wherein the processor further performs requesting the test of the WAAP from the blockchain, and receiving an API sample code safety grade confirmation request from the blockchain.

15 . The blockchain-based security system of claim 14 , wherein the processor further performs transmitting API safety grade status information including check information on the API safety grade to the blockchain.

16 . The blockchain-based security system of claim 15 , wherein the processor further performs self-upgrading the function of the WAAP with the administrator authority of the WAAP before the requesting of the test of the WAAP from the blockchain or requesting retest for WAAP level correction according to the WAAP level downgrade adjustment as a result of a previous test.