API World + CloudX + Dev Innovation Summit 2024

Simon Wijckmans, c/side, CEO

As developers, we continually put third-party code snippets into our organization’s websites to run features like chatbots, analytics, and payment gateways. However, these scripts have become a significantly increasing attack vector for cybercriminals—putting user data and businesses at risk. From the infamous British Airways breach to the recent Kaiser Permanente incident (and many more in between), the consequences of failing to secure these code vulnerabilities aren’t for the faint of heart.

In this Dev Innovation Summit session, we’ll dive deep into the unique challenges posed by the third-party code scripts that run behind the scenes in your user’s browsers. You’ll gain a technical understanding of how exactly these attacks occur and why they’ve been so difficult to monitor and secure. Through real-world examples and case studies, the talk will explore the tactics hackers employ to exploit these code vulnerabilities.

Arun Narasimhan, Senior Software Engineer


In today's digital landscape, large-scale system integrations between industry giants are essential for innovation and market leadership. This presentation explores the challenges and solutions involved in bridging disparate systems through strategic API implementation.

Traditionally, enterprises have operated within isolated ecosystems, resulting in fragmented user experiences. We will examine how industry leaders are overcoming these obstacles by integrating their systems to create unified platforms that deliver enhanced value.

Focusing on the technical intricacies of API schema design, we’ll discuss its significant impact on project timelines and the importance of building working interfaces early in the development process. Additionally, we’ll highlight the critical need to thoroughly review and challenge contractual fine print during integrations.

Attendees will gain valuable takeaways, including best practices for managing large-scale system integrations between industry behemoths. These lessons will prove invaluable for API architects, system integrators, and business leaders looking to forge powerful alliances in the digital age.

Clemens Vasters, Microsoft, Chief Messenger

Budhaditya Bhattacharya, Tyk, Developer Advocate
Supreet Nagi, Northwestern Mutual, Assistant Director Systems Software Engineering

NorthWestern Mutual is one of the largest financial services providers in the United States with 5 million+ customers and 6700+ financial advisors. APIs are a core part of our business and are supported by a highly mature API platform engineering team.
In this case study, we learn how we combined seamless API creation and centralized governance using an automated workflow-based model to drive an exceptional DevX.
We will examine a combination of tools, such as K8S, KEDA, Jaeger, and OTel, that enabled the creation of our API platform, along with changes to people and processes.
What we will cover:
1. Key challenges when balancing API creation & governance at scale
2. Implementing an automated workflow-based governance model
3. Metrics of success & outcomes achieved
4. How to execute a similar API platform strategy using the platform engineering maturity model
Ultimately, this session provides real-world examples and insights into best practices for implementing this model within your company.

Tim Erlin, Wallarm, VP of Product

Securing modern applications requires new thinking. As the prevalence of application programming interfaces (APIs) increases, and the exponential increase in API calls grows, attackers are taking notice. Attackers have shifted their primary focus from web applications to APIs and most security teams haven’t adapted. Since APIs are inherently more exposed than traditional web apps, security teams must rebalance their efforts to ensure defenses are strongest where attacks are actually occurring. The session will cover:

Introduction to API Security Requirements
Cross-referenced API Security Best Practices
A Security Maturity Model for API Security
3 Ways to Close Remaining Security Gaps
Q&A

Iddo Gino, Lunar, Advisor & Investor

With the AI craze taking over the world, a race is on to develop capable autonomous AI agents. For these agents to offer meaningful capabilities - they need to integrate with the outside world to get access to current information and be able to take actions on behalf of users. Two common approaches battle on for this - creating API integrations and using screen scraping. Each approach has advantages and risks - this session will introduce both approaches in depth, provide real world technical examples, and discuss when to choose which one!

Vishal Motwani, Numbers Station AI, Founding Product Manager

Unlock the power of AI in data analytics with Numbers Station's bespoke platform. Join Vishal Motwani, Founding Product Manager of Numbers Station, and uncover how Large Language Models (LLMs) are revolutionizing production-level data workflows. 

Via a multi-agent architecture and embeddable API, Numbers Station is built to seamlessly integrate with your existing knowledge sources—dashboards, databases, APIs, dbt, query logs and more. Numbers Station’s AI agents actively search, query, analyze, and take it two steps further—suggesting the next best action and automating downstream tasks in real-time.

Whether you're looking to embed Generative AI into legacy systems or elevate your organization's data capabilities, this session offers a glimpse into the future of AI-powered analytics that won't disrupt your current infrastructure. Don't miss this opportunity to supercharge your data strategy!

Jagrut Sharma, Adobe, Senior Software Engineer

Unlock the power of managing infrastructure through code in this dynamic session! You'll dive into the fundamentals of infrastructure as code (IaC) with a focus on AWS CloudFormation. Step-by-step, you'll learn how to write your first template to efficiently create, update, and delete cloud resources.

By the end of this hands-on workshop, you'll have added a valuable skill to your repertoire and be equipped with the knowledge to further explore the vast possibilities of infrastructure as code. Join to enhance your technical skillset and embark on a journey of continuous innovation in cloud infrastructure management.

Ken Huang, DistributedApps, CEO and Chief AI Officer

This presentation introduces a comprehensive framework for testing and validating the security of generative AI applications, particularly those built on large language models (LLMs). Developed by Ken Huang (the Speaker) and World Digital Technology Academy's AI Safety, Trust, and Responsibility (STR) working group, the framework addresses the new attack surfaces and risks introduced by generative AI.

The standard covers the entire AI application stack, including base model selection, embedding and vector databases, prompt execution/inference, agentic behaviors, fine-tuning, response handling, and runtime security. For each layer, it outlines specific testing methods and expected outcomes to ensure AI applications behave securely and as designed throughout their lifecycle.

Key areas of focus include model compliance, data usage checks, API security, prompt injection testing, output validation, and privacy protection. The framework also addresses emerging challenges like agentic behaviors, where AI agents autonomously perform tasks based on predefined objectives.

Harsh Sharma, Shell, Associate Software Engineer

How to build API/Interfaces using Azure Integration Services like logic App, APIM, Service Bus, Function App.
 

Brett Bush, LogicGate, Staff Software Engineer: Platform

Within API-First development, a dichotomy has formed: Code-First or Design-First. Are these approaches destined to be adopted in polarized isolation, or rather, are they equally valid phases of a healthy API development cycle? This presentation will reveal a new way to visualize the cyclical nature of Code-First and Design-First API development, discuss parallels to Test-Driven development, and explore the benefits unlocked from leveraging both methodologies in tandem. 

Michael Kwan, Broadcom, Architect

Quantum computing seems like a distant-future technology, but if you consider the pace of enterprise modernization, the quantum threat may be just around the corner - and APIs are a primary target. When is Q-day exactly? Nobody knows yet, but equally unknown is the scale of the corrective measures that will be required of your API infrastructure.

In this presentation you will learn:
- How quantum computing introduces a new security risk
- What is the API-specific exposure associated with this threat
- How and when do you need to start preparing your APIs
- What will be the costs in terms of computing resources and API retrofit projects
- What we are learning from post-quantum API security research and initial tests so far

Alain Chautard, Angular Training, Expert Web Consultant

We will test a web application from scratch using Cypress. Step by step, we will learn about Cypress features, implement those in our tests. We will be testing various aspects of the application (navigation, clicks, user input), and see how to debug and improve our tests, make then more readable, and even how to mock the server-side in order to test more scenarios on the front-end.

Shashank Ashtikar, M9, Co-Founder & CTO

With the viral adoption of AI driven by commercially available LLMs newer venues of business have opened up. These new business models are driven by the likes of Co-pilots and virtual agents that bring in tremendous productivity gains across business workflows. Concepts like Generative AI and Conversational AI have already gained mainstream popularity. A new branch of AI that is gaining momentum is that of Agentic AI. This talk is geared towards identifying mechanisms that make inter-agentic communication possible and the ontology of such interactions solving for needed concepts of roles, tasks, memory, tools, context and prompts for a scalable and reliable inter-agentic business workflow.
 

Todd Little, Oracle, Chief Architect Oracle Transaction Processing Products

Microservices are currently the architecture du jour for building cloud native applications. This session will describe how microservices, each with their own database, can work together to ensure the data they maintain is consistent with the databases of other microservices.
Deciding on a pattern to guarantee data consistency is dependent upon many factors. This session will describe some of those factors and provide practical solutions to ensuring data consistency across a broad range of microservices.
At the completion of this session, attendees should understand that it's more important to determine the context and requirements for their application than just going with the current mantra. Hopefully this will lead them to consider simpler design patterns that have been discarded for no other reason than someone decided they're an anti-pattern.

Akash Bhaskar, Cisco, Software Architect

This technical session will demonstrate software and configuration compliance use cases through CI/CD pipelines on network devices. A fully functional Jenkins pipelines will be discussed including tools and concepts like code management, artifact management, orchestration, testing.

Based on the concepts and tools mentioned in this session, network engineers can quickly build their own pipelines and take advantage of well tested approach in their network operations. The session will be tool independent where a certain concept will be introduced along with potential tool.

Brenton House, IBM, Principal Cybersecurity and AI Advisor

Generative AI has revolutionized the tech world in the past months. With its insatiable thirst for data, all eyes have turned to APIs and the security (or lack of) protecting them. Large data breaches have become so common that security researchers are overwhelmed with the terabytes of leaked data finding its way to the Dark Web. Learn both the ugly secrets behind cyber threats and the successful strategies used to stop them.
 

Naveen Achyuta, Roblox, Network Reliability Engineer

While CI/CD practices are well-established in software development, the networking field is still adapting to these methodologies. This presentation demonstrates a method for validating network configurations in a lab environment, both pre- and post-deployment, to build confidence before implementing changes in production networks. Using open-source tools, custom scripts, and containerlab, we'll walk through each step of implementing a CI/CD pipeline. This approach not only enhances confidence in network deployments but also bridges the gap between traditional networking practices and modern DevOps methodologies. 

Ramnivas Laddad, Exograph, Co-Founder

Rust has been the most loved programming language for the past eight years, as highlighted by StackOverflow's developer survey. Its acclaim is backed by adoption from tech giants like Microsoft, Google, and Meta. Rust's blend of expressiveness, performance, safety, and fearless concurrency makes it ideal for multi-core CPUs. Additionally, Rust's ability to compile into WebAssembly enables seamless execution in browsers and edge computing environments.

Mastering Rust can be challenging, especially for developers with a background in non-system languages. Adopting Rust with the right mindset and suitable projects is crucial for a smooth transition and successful implementation.

In this talk, we will explore Rust's core principles and provide practical guidance for developers experienced in Java, TypeScript, and like languages. We will highlight projects where Rust excels, offering high value with minimal risk.

Vamsi Ravula, Red Hat, Developer Advocate
Hugo Guerrero, Red Hat, Sr Principal Developer Advocate

Locationless API management is a paradigm shift in API governance and security. This innovative approach allows organizations to efficiently manage their APIs distributed across multiple clouds and clusters without exposing them publicly over the internet. Instead, it leverages a sophisticated layer seven service network, offering a secure and seamless solution for API management. By operating locationless, businesses can maintain a high degree of control and privacy over their APIs, mitigating the risks associated with public exposure while facilitating efficient communication between services across diverse deployment environments.

A Layer 7 service network provides the necessary infrastructure to establish secure connections between services, regardless of location. Through this network, APIs can be efficiently managed and accessed within a controlled environment, ensuring that sensitive data and functionalities remain protected. This locationless API management approach not only enhances security but also streamlines operations, as it minimizes the complexities of public-facing API management. As organizations continue to prioritize data privacy and security, locationless API management, powered by technologies like a Layer 7 service network, emerges as a game-changing solution that empowers businesses to securely manage and utilize their APIs without the need for public internet exposure.

Ayesha M. Ali, Metavisionaries, Co-Founder / Creative Director

This session will explore the transformative potential of APIs in the realm of Fusion Tech Art and interdisciplinary content creation. Emphasizing the integration of frontier technologies such as Artificial Intelligence (AI) and Machine Learning (ML), we will discuss how APIs serve as the vital connectors enabling seamless communication and collaboration across diverse creative fields. Participants will gain insights into how APIs facilitate innovative approaches that merge art, technology, fashion, and more.
Objectives:
• Introduce the Concept of Fusion Tech Art: Explain the importance and impact of Fusion Tech Art in the modern digital and creative industries.
• Highlight the Role of APIs: Discuss how APIs act as the backbone of integrating AI, ML, and various creative disciplines.
• Demonstrate Practical API Integration Techniques: Showcase new interdisciplinary approaches enabled by APIs and practical techniques that can be adopted by entrepreneurs and creatives.
• Case Study: Present a detailed case study of my project sent to space in collaboration with NASA and SpaceX, illustrating the power of API-driven integration.
• Ethical and Sustainable Practices: Address the ethical considerations and sustainability issues related to API-driven AI and tech projects, both on Earth and in space.
Session Outline:
1. Introduction to Fusion Tech Art:
• Definition and significance of Fusion Tech Art in contemporary creative practices.
• Overview of how APIs enable the integration of AI, ML, and other technologies into creative projects.
2. Current Landscape of Frontier Technologies:
• In-depth look at the latest developments in AI, ML, and their applications through APIs.
• Examples of cutting-edge tools and platforms that utilize APIs for interdisciplinary integration.
3. Seamless Interdisciplinary Techniques through APIs:
• Step-by-step guide on adopting an interdisciplinary approach using APIs.
• Demonstration of API functionalities that enable the merging of art, technology, fashion, and other fields.
4. Case Study: Art Project to Space via APIs:
• Detailed narrative of my project sent to the International Space Station (ISS) with NASA and SpaceX, focusing on the API integrations that made it possible.
• Insights into the creative process, collaboration, and execution of the project.
• Lessons learned and tips for aspiring creatives and entrepreneurs on leveraging APIs.
5. Ethics and Sustainability in API-Driven Fusion Tech Art:
• Discussion on the ethical implications of using APIs in AI and content creation.
• Sustainability discourse and its importance in tech-driven projects.
• How to ensure responsible and sustainable practices when utilizing APIs in creative projects.
Target Audience:
• API developers and technologists interested in the creative applications of their work.
• Artists and designers looking to integrate technology into their projects using APIs.
• Entrepreneurs and creatives seeking innovative interdisciplinary approaches.
• Educators and students in the fields of art, technology, and design.
Expected Outcomes:
• Increased awareness and understanding of Fusion Tech Art and the role of APIs in enabling it.
• Practical knowledge of API-driven tools and techniques for merging diverse creative disciplines.
• Inspiration from real-world examples and successful case studies.
• A framework for ethically and sustainably implementing API-driven AI and tech in creative projects.

Jeremy Snyder, FireTail.io, CEO and Founder

To start off, Jeremy will summarize key points and findings from extensive research into the API security landscape in 2024 with a look at our growing reliance on APIs and how APIs are increasingly being used as an attack surface.

Then, he’ll go over statistics on API proliferation and recap key developments from 2023, including the OWASP Top 10 Update 2023 and the impact AI is having on API security. He will pay particular attention to the massive expansion of API calling capabilities that came via recent OpenAI Updates and the overall impact of AI on API security.

Jeremy will then look at increasing regulatory oversight, the current shift toward personal accountability for CISOs and what this means for cyber security against a backdrop of increasingly sophisticated API attacks.

Jeremy will present real-world examples and show what we can learn from them, while drawing on data from a decade of data breaches, including notable cases like Points.com, moveIT, Money Lover and bugs in West Bengal and Rajasthan government websites, as well as others.

Jeremy will analyze API breaches by primary and secondary attack vectors and compare these findings to what we witnessed in 2023.

Finally, this talk will provide the actionable insights and practical advice needed to help you implement effective API security strategies across your organization. Jeremy will cover the 6 pillars of API security needed for companies to secure their APIs, as well as guidance on implementing authentication, authorization, input validation, encryption, and regular security assessments.

Overall, this talk will emphasize the importance of API security, summarize findings from the last 12 months, explore the trends we’re seeing in cyber security and make predictions for the rest of 2024, as well as providing recommendations and tips for improving cybersecurity postures.