Swagger and OpenAPI revolutionized the API landscape and created a thriving ecosystem of developer tools, from IDEs to contract testing and no-code solutions. In our projects (WireMock, Jenkins, Testcontainers and WireMock Cloud) we adopted OpenAPI to provide a great developer, and achieved great results. At the same time, the v3 version of specification has too many limitations, especially when it comes to behavior modeling: limited extensions framework, poor response flexibility limiting complex API options, and weak examples and self documentation capabilities. Good news is that OpenAPI v4 (Project Moonwalk) addresses many of those concerns and, hopefully, could address others before the release. Let’s, wearing our end user hats, discuss the v3 experiences and how we could address them in the upcoming major release!
Oleg is a developer tools hacker, community builder and DevRel consultant. He's passionate open source software, open ecosystems and open hardware advocate. Oleg is a core maintainer and ex board member in the Jenkins project. He's a CNCF ambassador, Testcontainers Champion, GSoC... Read More →
Geospatial Information Systems (GIS) are pivotal across industries. Yet, many GIS applications remain anchored in outdated, monolithic structures.
Join us for an insightful session with Anthony Molzahn, CEO of Devii, to discover how cutting-edge microservices are transforming the GIS landscape.
Anthony, a pioneer in remote sensing, GIS, and API technologies, will share the value in making spatial data more accessible and commercially viable. Learn how these innovations are driving efficiency and growth in sectors like manufacturing, supply chain, agtech, energy, security, photonics, and IoT.
Anthony Molzahn is the CEO and co-founder of Devii, a company specializing in a middleware capable of automating the generation of GraphQL schemas and APIs for any and all SQL-based relational databases.With 16+ years of experience in B2B SaaS and startup environments, Anthony has... Read More →
Securing modern applications requires new thinking. As the prevalence of application programming interfaces (APIs) increases, and the exponential increase in API calls grows, attackers are taking notice. Attackers have shifted their primary focus from web applications to APIs and most security teams haven’t adapted. Since APIs are inherently more exposed than traditional web apps, security teams must rebalance their efforts to ensure defenses are strongest where attacks are actually occurring. The session will cover:
Introduction to API Security Requirements Cross-referenced API Security Best Practices A Security Maturity Model for API Security 3 Ways to Close Remaining Security Gaps Q&A
Sterling presents a comprehensive playbook for navigating the AI API landscape, which has been rapidly evolving since the AI revolution began in late 2022. We'll explore how APIs have become the cornerstone of AI accessibility and implementation across industries.
Attendees will gain actionable insights on how to implement and maximize the potential of AI APIs in their organizations. This playbook approach will equip participants with the knowledge to make informed decisions, overcome common challenges, and stay ahead in the rapidly advancing field of AI.
Whether you're new to AI implementation or looking to optimize your current strategies, this talk will provide valuable, real-world guidance for harnessing the power of AI through APIs.
You'll Learn: 1. How to evaluate AI APIs 2. Open Source or Close Source? 3. How to create a playbook on implementing AI APIs in your products
Sterling Chin is a driving force behind numerous Postman initiatives from inception to launch, including the GA releases of gRPC, GraphQL, Postman Flows, and most recently Postbot, Postman’s AI Assistant. As a long time proponent of AI/ML, he has been instrumental in the adoption... Read More →
Matt McLarty, Boomi, CTO & VP, Boomi Innovation Group
As AI becomes more prevalent, communication between API endpoints is expanding rapidly. The current API economy is just the tip of the iceberg compared to what lies ahead in an AI-driven future. In this landscape, APIs are crucial for enabling AI integration and readiness, fundamentally transforming application development.
Discover techniques for strategic AI implementation, responsible automation, and effective API management to establish an AI-ready enterprise. Whether you’re an API developer, AI practitioner, or business stakeholder, this talk will provide insights for effective AI orchestration and turning AI readiness into a competitive advantage.
Key Takeaways: - Practical methods to enhance AI integration with APIs - Using AI ethically with APIs - Insights on achieving AI readiness and avoiding pitfalls
Matt McLarty is the Chief Technology Officer for Boomi. He helps organizations around the world thrive in the digital age. He is an active member of the worldwide API community, has led global technical teams at Salesforce, IBM and CA Technologies, and started his career in financial... Read More →
Gaganjot Kaur Kang, Sony Interactive Entertainment, Software Engineer
This session is geared towards equipping software engineers, technical managers, and business owners with an in-depth guide to optimizing API performance. Attendees can expect the following key takeaways:
- Explore fundamental principles and top practices to grasp the importance of API performance optimization. - Acquire knowledge of API architecture patterns through real-world examples, aiding in the development of data-intensive applications. - Discover strategies for bolstering the speed, scalability, and reliability of APIs.
Within API-First development, a dichotomy has formed: Code-First or Design-First. Are these approaches destined to be adopted in polarized isolation, or rather, are they equally valid phases of a healthy API development cycle? This presentation will reveal a new way to visualize the cyclical nature of Code-First and Design-First API development, discuss parallels to Test-Driven development, and explore the benefits unlocked from leveraging both methodologies in tandem.
Brett Bush is a Staff Software Engineer at LogicGate with a decade of experience building flexible APIs, services, and databases from SaaS platforms to SDKs with a passion for developer experience, comprehensive documentation, and cross-team collaboration. Brett built out LogicGate's... Read More →
Quantum computing seems like a distant-future technology, but if you consider the pace of enterprise modernization, the quantum threat may be just around the corner - and APIs are a primary target. When is Q-day exactly? Nobody knows yet, but equally unknown is the scale of the corrective measures that will be required of your API infrastructure.
In this presentation you will learn: - How quantum computing introduces a new security risk - What is the API-specific exposure associated with this threat - How and when do you need to start preparing your APIs - What will be the costs in terms of computing resources and API retrofit projects - What we are learning from post-quantum API security research and initial tests so far
Michael Kwan is an accomplished software engineer and architect with passion creating scalable, secured, robust software solutions. At Broadcom, currently, his focus is designing solutions to help businesses develop, protect, and secure their APIs and valuable resources.
In today's micro services world, it is far too common for an API service to explode at an unbounded rate. The journey starts off as a shiny new micro service, which was designed to contain APIs for 1 business entity, becoming so heavily utilized that over time, it evolves and turns into a massive monolith, which contains hundreds of APIs for dozens of business entities. In the early days, new features could be introduced and rolled out within a few hours. Now, a small database schema change takes a few days or weeks to roll out. In this madness, how do you effectively and efficiently decompose and modernize your monolith? This session goes over a real world case study of how a group of 5 engineers decomposed a 160+ API monolith into smaller and focused micro services with 0 outages, 0 downtime, increase in overall service availability from 99.9% to 99.999%, decrease in latencies from 15% to 95% and ability to handle 90x more traffic with a reduced resource footprint (68% reduction in compute and 55% reduction in memory).
Parth is a highly accomplished Staff Software Engineer who is currently working on Developer Productivity at Cruise LLC. With a distinguished career spanning across industry giants such as Oracle and Microsoft, he has consistently designed, developed, and delivered cutting-edge cloud... Read More →
Bianca Tamayo is a Staff Software Engineer at Cruise, based in San Francisco. She has a broad range of experience, including full-stack application development, backend services, release and deployment, and building platforms. Bianca's passion lies in developing systems that simplify... Read More →
F5 secures and optimizes traffic for some of the largest AI projects in the world, and organizations are planning to spend an average of 18% of 2025 IT budgets on AI implementation. What many are missing is that outside of a few edge cases, nearly all training, usage, attacks, and data loss against AI models come through APIs, and APIs themselves expose critical information about models such as data labels and confidence scores, facilitating model theft, transfer attacks, and other issues unique to securing LLMs. In this session, we’ll talk about the ties between AI security, APIs, and how to structure a Defense in Depth architecture to secure your AI factory and models from the beginning, rather than after the fact.
Corey has provided cybersecurity consulting services since 2011, and has primarily focused his expertise on the energy, financial, legal, and health care industries. He has extensive technical experience in multiple security areas, including penetration testing, web application security... Read More →
With the viral adoption of AI driven by commercially available LLMs newer venues of business have opened up. These new business models are driven by the likes of Co-pilots and virtual agents that bring in tremendous productivity gains across business workflows. Concepts like Generative AI and Conversational AI have already gained mainstream popularity. A new branch of AI that is gaining momentum is that of Agentic AI. This talk is geared towards identifying mechanisms that make inter-agentic communication possible and the ontology of such interactions solving for needed concepts of roles, tasks, memory, tools, context and prompts for a scalable and reliable inter-agentic business workflow.
Shashank is the co-founder and CTO of M9. He has more than a decade of work experience working in technology. More recently he was leading performance and AI initiatives at Akasa where he improved developer productivity by 1000x. Prior to that he was with Amazon where his work on... Read More →
Microservices are currently the architecture du jour for building cloud native applications. This session will describe how microservices, each with their own database, can work together to ensure the data they maintain is consistent with the databases of other microservices. Deciding on a pattern to guarantee data consistency is dependent upon many factors. This session will describe some of those factors and provide practical solutions to ensuring data consistency across a broad range of microservices. At the completion of this session, attendees should understand that it's more important to determine the context and requirements for their application than just going with the current mantra. Hopefully this will lead them to consider simpler design patterns that have been discarded for no other reason than someone decided they're an anti-pattern.
Todd Little is chief architect for transaction processing products at Oracle, including the Oracle Tuxedo product family, Oracle Blockchain Platform, and Oracle Transaction Manager for Microservices (MicroTx). Todd is responsible for defining the technical strategy and direction for... Read More →
Ed Olson-Morgan, Marsh McLennan, Core API & Innovation Lead
Driving value from generative AI isn't just about large language models. Integrating them with the right data, services and supporting capabilities through APIs is just as important.
Learn how Marsh McLennan's Generative AI Services project built an API-based environment to nourish AI experimentation and underpin AI impact through production applications serving their 90,000 employees as well as a world-wide client base.
Ed Olson-Morgan is an experienced technology leader with a diverse background across technical fields as well as business, consulting and strategy. He is currently the Core APIs and Innovation Lead at Marsh McLennan, where he is building a team of software engineers and technologists... Read More →
This technical session will demonstrate software and configuration compliance use cases through CI/CD pipelines on network devices. A fully functional Jenkins pipelines will be discussed including tools and concepts like code management, artifact management, orchestration, testing.
Based on the concepts and tools mentioned in this session, network engineers can quickly build their own pipelines and take advantage of well tested approach in their network operations. The session will be tool independent where a certain concept will be introduced along with potential tool.
Akash has over a decade of experience including Site Reliability, DevOps, IT Operations, Middleware Administration, ITIL and Managed File Transfer. Cisco has provided Akash an opportunity apply SRE principles to network operations. Akash has presented at Cisco Live EMEA at Amsterdam... Read More →
Brenton House, IBM, Principal Cybersecurity and AI Advisor
Generative AI has revolutionized the tech world in the past months. With its insatiable thirst for data, all eyes have turned to APIs and the security (or lack of) protecting them. Large data breaches have become so common that security researchers are overwhelmed with the terabytes of leaked data finding its way to the Dark Web. Learn both the ugly secrets behind cyber threats and the successful strategies used to stop them.
Brenton House is an ex-hacker, developer, strategist, and now Principal Cybersecurity and AI Advisor for IBM webMethods. Known for his unique creative work and YouTube channel, Brenton has produced several hit series including The Redacted Hacker, AI: Man vs. Machine, and API Cybersecurity... Read More →
Vamsi Ravula, Red Hat, Developer Advocate Hugo Guerrero, Red Hat, Sr Principal Developer Advocate
Locationless API management is a paradigm shift in API governance and security. This innovative approach allows organizations to efficiently manage their APIs distributed across multiple clouds and clusters without exposing them publicly over the internet. Instead, it leverages a sophisticated layer seven service network, offering a secure and seamless solution for API management. By operating locationless, businesses can maintain a high degree of control and privacy over their APIs, mitigating the risks associated with public exposure while facilitating efficient communication between services across diverse deployment environments.
A Layer 7 service network provides the necessary infrastructure to establish secure connections between services, regardless of location. Through this network, APIs can be efficiently managed and accessed within a controlled environment, ensuring that sensitive data and functionalities remain protected. This locationless API management approach not only enhances security but also streamlines operations, as it minimizes the complexities of public-facing API management. As organizations continue to prioritize data privacy and security, locationless API management, powered by technologies like a Layer 7 service network, emerges as a game-changing solution that empowers businesses to securely manage and utilize their APIs without the need for public internet exposure.
Hugo Guerrero is a developer advocate at Red Hat. He has over 20 years of experience as a developer, consultant, architect, and software development manager. He is an AsyncAPI ambassador and contributes to open source initiatives. He is responsible for maintaining the Microcks Docker... Read More →
Vamsi Ravula is a Technical Marketing Manager at Red Hat working on Red Hat Application Foundations, application connectivity, and API management technologies. He is passionate about understanding customers' challenges and use cases and showcasing how Red Hat products can address... Read More →
To start off, Jeremy will summarize key points and findings from extensive research into the API security landscape in 2024 with a look at our growing reliance on APIs and how APIs are increasingly being used as an attack surface.
Then, he’ll go over statistics on API proliferation and recap key developments from 2023, including the OWASP Top 10 Update 2023 and the impact AI is having on API security. He will pay particular attention to the massive expansion of API calling capabilities that came via recent OpenAI Updates and the overall impact of AI on API security.
Jeremy will then look at increasing regulatory oversight, the current shift toward personal accountability for CISOs and what this means for cyber security against a backdrop of increasingly sophisticated API attacks.
Jeremy will present real-world examples and show what we can learn from them, while drawing on data from a decade of data breaches, including notable cases like Points.com, moveIT, Money Lover and bugs in West Bengal and Rajasthan government websites, as well as others.
Jeremy will analyze API breaches by primary and secondary attack vectors and compare these findings to what we witnessed in 2023.
Finally, this talk will provide the actionable insights and practical advice needed to help you implement effective API security strategies across your organization. Jeremy will cover the 6 pillars of API security needed for companies to secure their APIs, as well as guidance on implementing authentication, authorization, input validation, encryption, and regular security assessments.
Overall, this talk will emphasize the importance of API security, summarize findings from the last 12 months, explore the trends we’re seeing in cyber security and make predictions for the rest of 2024, as well as providing recommendations and tips for improving cybersecurity postures.
Jeremy is the founder and CEO of FireTail.io, an end-to-end API security startup. Prior to FireTail, Jeremy worked in M&A at Rapid7, a global cyber leader, where he worked on the acquisitions of 3 companies during the pandemic. Jeremy previously led sales at DivvyCloud, one of the... Read More →
