2) Specifying three types API security models with
different strategies and mechanisms in mobile cloud
computing.
3) Providing an informal comparison of the API security
features provided by ten API gateway providers.
Our research work has been motivated by the desire to
understand and evaluate the Web API security models,
technologies, and standards for securing mobile cloud
computing. Since Web API is a key component setting
between mobile cloud applications running in devices and the
services and data on-premise as well as in the cloud, API
security becomes the key in security quality of mobile cloud
computing. Our initial research on API security is helpful at
further security research of mobile cloud computing.