All You Need to Know About Protecting Against Runtime Threats to APIs and Applications