Application Program Interfaces (APIs) are used for communication between software and hardware. Specific functionality is often coded into APIs which can be called by software to engage specific functions on a device or other software. Minimize user’s access to only required API calls to ensure the execution of code. Use of APIs to enforce authorization policies and enforcement of user access. Minimize the exposure of API calls that allow the execution. Use API calls on remote systems or local processes should require the authentication of users before executing any code or system changes.”]
Source: https://collaborate.mitre.org/attackics/index.php/Technique/T0871