LF_APIStrat17_Keep Your Swagger On

•

1 like•34 views

Behold the magic of the next-gen of the OSS Swagger tooling, now with OpenAPI V3 support! Learn how we improved developer experience, making the tools even easier to use. With our enhanced infrastructure, you can make it your own - configure, customize and extend to suit your needs. This talk will cover what changed in our ecosystem and provide a glimpse of the roadmap ahead. Come and get a demo of what the future of Swagger and OpenAPIV3 looks like!

Technology

Keep Your Swagger On
Ron Ratovsky (@webron)

Swagger is…
-An open source toolset
-Covering portions of the API lifecycle
-Supports both code-first and design-first approaches
-Focused around the OpenAPISpecification
Swagger is not…
The OpenAPISpecification

Driving the API Lifecycle with OAS
Design
Implementation
Testing
Mocking
Documentation
Virtualization
Deployment
/ Runtime
Clients
Security, Usage policies,
Monitoring, Caching, etc
Developer portals,
Code samples, User guides, etc.
Functional / Runtime simulations
Functional, Security,
Load, Compliance, etc.
Generated server code/artifacts
Prototyping
Generated client libraries
Object reuse, linking,
Callbacks, etc.

The Swagger Projects
1. Swagger-core
2. Swagger-parser
3. Swagger-inflector
4. Swagger-codegen
5. Validator-badge
6. Swagger-converter
7. Swagger-js
8. Swagger-ui
9. Swagger-editor
10. Swagger-node
11. …

- Code-first approach
- Java JAX-RS
- Basis for other projects (annotations, models)
- OAS3 (swagger-core 2.0):
- Rewrite of annotations and models
- Cleanup of set up process
- Built to co-exist with 1.5
- Support utility for deserializingOpenAPIdocuments
- Depends on Swagger-core’s models.
- OAS3 (swagger-parser 2.0):
- Convert previous versions to 3.0
- Provides 3.0 validation
- More customizable with options
Swagger-core Swagger-parser

- Design-first approach
- Java JAX-RS (Jersey)
- Depends on Swagger-parser
- OAS3 (swagger-inflector 2.0):
- Modified for OAS3 support (*)
- Plans to co-exist with OAS2 support
- Improved mocking capabilities
- Client/Server generation
- Depends on Swagger-parser
- Available as a library, CLI and a service
- WIP Changes (swagger-codegen3.0):
- Support for 3.0 versions and older (through
conversion)
- Moving to handlebars
- Improved CLI
- Breaking out the templates
- And more…
Swagger-inflector Swagger-codegen

- Definition validation
- Runs as a service
- Depends on Swagger-parser
- OAS3 (validator-badge 2.0):
- Modified for OAS3 support (*)
- Plans to co-exist with OAS2 support
- New and improved API
- OAS2àOAS3 conversion
- Runs as a service
- Depends on Swagger-parser
- WIP (swagger-converter 1.0):
- Pushing out the first version
Validator-badge Swagger-converter

- Parser, resolver, client
- Was recently written from scratch (prior to OAS3)
- OAS3 (swagger-client 3.X):
- Parse and resolve OAS3 documents
- Client functionality partially implemented,
still WIP.
- Visualization
- Depends on Swagger-js
- Uses the Validator-badge
- Swagger-UI 3.X:
- Was recently written from scratch
- Provides easier customization
- Improved performance and visuals
- OAS3:
- Support for rendering OAS3 documents (*)
- Exciting plans for links
- Sandbox functionality is still WIP
Swagger-js Swagger-UI

- OAS IDE
- Depends on Swagger-UI
- Uses Swagger-codegen
- Swagger-Editor 3.X:
- Was recently written from scratch
- Provides easier customization
- Improved auto-suggest
- Improved validation
- OAS3:
- Supports OAS3 completion
- OAS3 structural validation
- Semantic validation is WIP
- Design-first approach
- Plans:
- Provide support for OAS3 based on
swagger-js
- Break the dependency on Editor/UI
- Implement similar features to Swagger-
Inflector
Swagger-Editor Swagger-node

Thank you!
http://swagger.io
https://github.com/swagger-api
@SwaggerAPI
Visit us at the
booth to hear more about
Swagger and SwaggerHub

Similar to LF_APIStrat17_Keep Your Swagger On

AppSec & OWASP Top 10 Primer By Matt Scheurer (@c3rkah) Cincinnati, Ohio Date: 03/21/2019 Momentum Developer Conference Sharonville Convention Center #momentumdevcon Abstract: Are you testing the security of your web applications, web sites, and web servers? The malicious threat actors on the Internet almost certainly are. We will cover AppSec along with a brief review of the 2017 OWASP Top 10 List. The focus of the presentation is how to get started with AppSec and where to continue learning more. Accompanying the presentation are live demos of Nikto and the OWASP Zed Attack Proxy (ZAP). Bio: Matt Scheurer serves as Chair of the Cincinnati Networking Professionals Association Security Special Interest Group (CiNPA Security SIG) and works as a Systems Security Engineer in the Financial Services industry. He holds a CompTIA Security+ Certification and possesses multiple Microsoft Certifications including MCP, MCPS, MCTS, MCSA, and MCITP. He has presented on numerous Information Security topics as a featured speaker at many local area technology groups and large Information Security conferences all over the Ohio, Indiana, and Kentucky Tri-State. Matt maintains active memberships in a number of professional organizations including the Association for Computing Machinery (ACM), Cincinnati Networking Professionals Association (CiNPA), Financial Services - Information Sharing and Analysis Center (FS-ISAC), and Information Systems Security Association (ISSA).

AppSec & OWASP Top 10 Primer

ThreatReel Podcast

Server Side JavaScript on the JVM - Project Avatar - QCon London March 2014

David Delabassee

WSO2Con Asia 2014 - WSO2 AppDev Platform for the Connected Business

WSO2

WSO2 AppDev platform

Sagara Gunathunga

Next-generation JavaScript - OpenSlava 2014

Oscar Renalias

AUTH - SEAF

Caroline Milne

Running an app sec program with OWASP projects_ Defcon AppSec Village

Vandana Verma

Technology First 16th Annual Ohio Information Security Conference OISC 2019 #OISC19 The OWASP Top 10 & AppSec Primer By Matt Scheurer (@c3rkah) Dayton, Ohio Date: 03/13/2019 Abstract: Are you testing the security of your web applications, web sites, and web servers? The malicious threat actors on the Internet almost certainly are. We will cover AppSec along with a brief review of the 2017 OWASP Top 10 List. The focus of the presentation is how to get started with AppSec and where to continue learning more. Accompanying the presentation are live demos of Nikto and the OWASP Zed Attack Proxy (ZAP). Bio: Matt Scheurer serves as Chair of the Cincinnati Networking Professionals Association Security Special Interest Group (CiNPA Security SIG) and works as a Systems Security Engineer in the Financial Services industry. He holds a CompTIA Security+ Certification and possesses multiple Microsoft Certifications including MCP, MCPS, MCTS, MCSA, and MCITP. He has presented on numerous Information Security topics as a featured speaker at many local area technology groups and large Information Security conferences all over the Ohio, Indiana, and Kentucky Tri-State. Matt maintains active memberships in a number of professional organizations including the Association for Computing Machinery (ACM), Cincinnati Networking Professionals Association (CiNPA), Financial Services - Information Sharing and Analysis Center (FS-ISAC), and Information Systems Security Association (ISSA).

OISC 2019 - The OWASP Top 10 & AppSec Primer

ThreatReel Podcast

Owasp london training course 2010 - Matteo Meucci

Matteo Meucci

we45 DEFCON Workshop - Building AppSec Automation with Python

Abhay Bhargav

Server Side JavaScript on the Java Platform - David Delabassee

JAXLondon2014

Securing your web applications a pragmatic approach

Antonio Parata

Extend soa with api management spoug- Madrid

Vinay Kumar

OWASP - Open Web Applications Security Project to fundacja której celem jest eliminacja problemów bezpieczeństwa aplikacji. OWASP działa w duchu "open source" i dostarcza narzędzi, informacji i wiedzy pozwalających podnieść poziom bezpieczeństwa aplikacji. W trakcie wykładu przedstawię krótko OWASP Top 10 w wydaniu dla programistów, czyli "Top 10 Proactive Controls" a więc najważniejsze zalecenia pozwalające na uniknięcie kluczowych błędów bezpieczeństwa.

Ten Commandments of Secure Coding - OWASP Top Ten Proactive Controls

SecuRing

Ten Commandments of Secure Coding

Mateusz Olejarka

any organizations today are leveraging microservices architecture (MSA) which is becoming increasingly popular because of its many potential advantages. This webinar introduces WSO2 Microservices Framework for Java (MSF4J), which provides the necessary framework and tooling to build an MSA solution. During this webinar, Sagara will Introduce WSO2 MSF4J programming model and deployment options Discuss the key strengths and performance measures of WSO2 MSF4J over other frameworks Demonstrate security, analytics and service discovery Highlight tooling, Swagger support and its seamless integration with rest of the platform

An Introduction to WSO2 Microservices Framework for Java

Sagara Gunathunga

Effective DevSecOps

Pawel Krawczyk

Building Services with WSO2 Microservices framework for Java and WSO2 AS

Kasun Gajasinghe

Application Monitoring with WSO2 App Server

Sagara Gunathunga

Owasptunisiawebday2011 120112072523-phpapp02

Abwebnet

Similar to LF_APIStrat17_Keep Your Swagger On (20)

AppSec & OWASP Top 10 Primer

Server Side JavaScript on the JVM - Project Avatar - QCon London March 2014

WSO2Con Asia 2014 - WSO2 AppDev Platform for the Connected Business

WSO2 AppDev platform

Next-generation JavaScript - OpenSlava 2014

AUTH - SEAF

Running an app sec program with OWASP projects_ Defcon AppSec Village

OISC 2019 - The OWASP Top 10 & AppSec Primer

Owasp london training course 2010 - Matteo Meucci

we45 DEFCON Workshop - Building AppSec Automation with Python

Server Side JavaScript on the Java Platform - David Delabassee

Securing your web applications a pragmatic approach

Extend soa with api management spoug- Madrid

Ten Commandments of Secure Coding - OWASP Top Ten Proactive Controls

Ten Commandments of Secure Coding

An Introduction to WSO2 Microservices Framework for Java

Effective DevSecOps

Building Services with WSO2 Microservices framework for Java and WSO2 AS

Application Monitoring with WSO2 App Server

Owasptunisiawebday2011 120112072523-phpapp02

More from LF_APIStrat

OWASP’s 2017 top ten adds a new category called 'underprotected APIs', reflecting the growth of RESTful Web APIs and richer front-end clients which stress current security and access authorization approaches. You’ll learn about potential threats resulting from undersecured Web APIs and techniques to strengthen your API security posture. You'll gain a clear understanding of user authorization via OAuth2, software authorization via static API keys and the critical interplay between them. Of particular concern are mobile API consumers whose code is statically published with secrets which are often poorly concealed. Practical advice with code examples will show how to improve mobile API security. TLS is necessary but insufficient to fully secure client-server communications. Certificate pinning is explained with code examples to show how to strengthen channel communications. Some advanced techniques will be discussed such as app hardening, white box cryptography and mobile app attestation. You should gain a good understanding of the underprotected API problem, with some immediately practical tips to improve your API security posture and a sense of emerging tools and technologies that enable a significant step change in API security.

LF_APIStrat17_OWASP’s Latest Category: API Underprotection

LF_APIStrat

People often tend to think of Asterisk as an "open source PBX" because that was the focus of the original development effort. But calling Asterisk a PBX is both selling it short (it is much more) and overstating it (it can be much less). Asterisk is to communications applications what the Apache web server is to web applications. Apache is a web server. Asterisk is a communication server. When you install Asterisk, you have a communications server but it is up to you to create the communications applications. The Asterisk RESTFul Interface (ARI) is an asynchronous API that allows developers to build communications applications by exposing the raw primitive objects in Asterisk - channels, bridges, endpoints, media, etc. The state of the objects being controlled by the user are conveyed via JSON events over a WebSocket. These resources were traditionally the purview of Asterisk's C modules. By handing control of these resources via ARI to all developers regardless of their language choice Asterisk has become an engine of communication, with the business logic of how things should communicate deferred to the application using Asterisk. This presentation will provide information on getting started using ARI and will provide a working demonstration of using the ARI to create a telephone application.

LF_APIStrat17_Creating Communication Applications using the Asterisk RESTFul ...

LF_APIStrat

Let's talk testing. You know you should do it, but you probably don't enjoy it very much. I'll try to change your mind about that by showing you just how easy – and fun – it can be to test REST APIs. Whether you prefer the command line, a text editor, or a GUI, I'll show you tools that will fit nicely into your workflow. In this workshop, you'll get hands-on experience with multiple API testing tools. We'll test the same API in each tool to compare the differences between them, including features, limitations, and ease of use. So bring your laptop, or just watch me. Either way, I'll send you home with sample code, working demos, and a better understanding of API testing.

LF_APIStrat17_Super-Powered REST API Testing

LF_APIStrat

How confident are you that your developer experience matches the expectations of your customers? How can you judge if you’re providing an adequate or best-in-class experience? What about your competition? How do you compare? We had the same questions at Arity, and so developed a maturity model for API programs. Based on a year of user testing with developers, this model covers categories such as support and documentation. This maturity model helps you focus your time and effort on the areas that will provide the greatest value for your customers. It’s a way to distill all the elements of the developer experience into an easily consumable document to give to stakeholders, helping you explain why the things you do as a manager of the developer community translate to increased sales for your organization. We’ll go through the model together so you can score your company’s program. You’ll leave the session with a score and roadmap of how this can help you influence your stakeholders.

LF_APIStrat17_How Mature are You? A Developer Experience Maturity Model

LF_APIStrat

You may have seen the articles or blog posts claiming something outrageous like how you can connect to hundreds of other Apps and enable thousands of use cases within a few hours of development. They’re true. In this workshop, the Left Hook team will walk you through how to connect your App to hundreds of others on Zapier’s platform in a matter of minutes. There are a few big asterisks to achieve this speed: 1) Your API needs to be RESTful using either API token or OAuth2.0; 2) You’ll need to choose only a few basic use cases; 3) You need to be comfortable in a Node.js environment; 4) You need to be comfortable using a CLI tool.

LF_APIStrat17_Connect Your RESTful API to Hundreds of Others in Minutes (Zapi...

LF_APIStrat

"Have you ever read a piece of API documentation and thought it was a mess? Maybe it was incomplete, badly organized, or in general just not great. There’s a good chance it was quickly thrown together by someone who had no idea what they were doing. In this talk, we will discuss the things Taylor wished she knew before starting to dive into the world of writing docs and developer focused content. We will discuss how people actually read documentation, different types of docs and when they are appropriate, and docs navigation techniques using design principles. Also, we will learn more about the importance of focusing on language, including why naming matters and error messages as a form of documentation. Lastly, we will talk about tools and tactics to enable other team members to write documentation."

LF_APIStrat17_Things I Wish People Told Me About Writing Docs

LF_APIStrat

Congratulations, you have a project to migrate a large legacy software system to the cloud. Also it needs some updates and the clients have a whole list of feature requests. Are you experiencing feelings of dread or exciting visions of the possibilities? The good news is that it can and should be the latter. The Open API ecosystem makes it easier than ever to take on a project like this and be successful. In this talk Seth will introduce his team’s ongoing migration project as a case study. He will discuss the primary benefits of open APIs as part of the migration and how they contribute to velocity, visibility, team focus, and feature development. He will examine strategies for identifying APIs, validating APIs, and integrating APIs into a legacy migration project. He will then discuss the layers of a legacy application that APIs can be used to address (hint: more than you may think).

LF_APIStrat17_Lifting Legacy to the Cloud on API Boosters

LF_APIStrat

The idea of designing an API first, then having both the publishing developer teams and consuming client developer teams do their work in parallel is a pattern that the standards & tooling of the Open API ecosystem make worth considering. However, this approach is not without its challenges especially when it comes to governance and communication. This session will present a real-world case study where this approach was executed successfully, going over how the work, teams, and deliverables were structured and presenting lessons learned that will be useful to anyone else considering this working model.

LF_APIStrat17_Contract-first API Development: A Case Study in Parallel API Pu...

LF_APIStrat

"If you find yourself maintaining a set of documents explaining the use of your API, you haven't finished it's design yet. This talk will compare various strategies with examples, while discussing ways to determine the most appropriate method for your API. We will explore OAS (Swagger), Json-LD, Schema.org, HAL, Hydra, Siren, Semantic profiles, and other formats while comparing their relative strengths and weaknesses. After these options, we will arm you with a series of questions which direct you to the appropriate tool for your API. Discover how you can save considerable time and headaches by incorporating a self documenting method in your API design."

LF_APIStrat17_Don't Repeat Yourself - Your API is Your Documentation

LF_APIStrat

We ruthlessly prioritize everything we do and automate away anything we have to do more than a couple times. This has helped the SendGrid DX team to maintain libraries for 7 different programming languages and their github communities with a single engineer. We challenge ourselves to always be working on the highest impact items for our users. Our goals are to maintain engagement with our developer community, manage our libraries at the highest possible level, all while sustaining our lean team.

LF_APIStrat17_How We Doubled the Velocity of Our Developer Experience Team

LF_APIStrat

How would you market an API? Well, first you must design a usable service that caters to your developer experience. But even the best API needs a promotional boost. One way to do this is to maximize all routes toward making your interface naturally discoverable. In this presentation, I’ll outline strategies and tools that can be used to increase the exposure of an API, covering things like: * Examples of sandboxes, API playgrounds, and other types of usable interfaces found in well-designed dev portals throughout the API space. * Discoverability benefits of using machine readable API definitions. * Tooling that can aid in generating beautiful documentation and test consoles to appeal to developers. * Directory profiling: Increasing exposure in web API-specific directories like ProgrammableWeb, APIs.guru, and 10 others. * Content generation: Crafting search-engine-optimized descriptions of APIs from a copywriting sensibility and the power of graphic design trends and thought leadership to reinforce credibility. * Many other ideas on establishing communities and marketing APIs and SaaS on integral developer social channels.

LF_APIStrat17_API Marketing: First Comes Usability, then Discoverability

LF_APIStrat

How can we extend everyone's technological reach, no matter where they're starting from? How can IT become a platform that lets everyone stand taller? I'll talk about the critical role APIs play in creating more digital workforces. As organizations spend billions on various digital transformation efforts, they need to empower more of their people, not just developers and IT staff, to understand and interact with their data and technologies through APIs. The key is providing tools to people that make APIs more accessible to more people. APIs enable all sorts of combinations and linkages between data and technologies, and giving people streamlined access to APIs enables them to combine and extend their own expertise in innovative ways. Illustrative examples from working in IoT and APIs include academic research projects in many disciplines and business implementations across industries.

LF_APIStrat17_Standing Taller with Technology: APIs, IoT, and the Digital Wor...

LF_APIStrat

OpenStack ran into a challenge: how do you balance the ability to evolve a REST API, with backwards compatibility guarantees, and have it work the same across different deployments, when you have no control over when they are going to upgrade. The answer we came up with was labeled "Microversions", inspired by HTTP content negotiation. This talk will dig into the challenges of versioning REST APIs, as well as the unique challenges of versioning ones that expect to exist in interoperable public clouds. It will dive through ideas that were tried and retired in OpenStack, and describe in depth the microversion system that many OpenStack services now use. We'll look at what's been learned in 2 years of this in the field, and suggest how related approaches might be applied to other open source projects.

LF_APIStrat17_REST API Microversions

LF_APIStrat

To many of us in the API community, open standards seem like a no-brainer: they promote interoperability, extensibility, and longevity, all while helping you reap the benefits of being part of a larger ecosystem. These benefits include greater and more rapid adoption by developers and being in sync with and a contributor to best practices. But what happens when the clients consuming your APIs are enterprise healthcare companies, whose teams will develop integrations with your APIs regardless of best practices and who want things done their way rather than the open standard way? This talk draws on the speaker’s experiences integrating with enterprise healthcare systems to illustrate the value of projects such as the Open API Specification, open data model standards (e.g. Open Referral), and hypermedia formats, and how to communicate these benefits to reluctant enterprise clients.

LF_APIStrat17_I Believe You But My Enterprise Don't: Adopting Open Standards ...

LF_APIStrat

Disclaimer: This talk is about the models, processes, and algorithms that power machine learning APIs rather than about the API itself. Machine learning is fast becoming ubiquitous, from large enterprises to small startups. In this talk, we’ll embark on a journey with a small risk management startup, and we’ll talk about how snowflakes & trees and chickens & eggs came together to help the startup implement its own flavor of machine learning. This is the story of the cold decision tree and how it solved the cold start problem.

LF_APIStrat17_Case Study: Cold Decision Trees

LF_APIStrat

"Is your organization getting maximum impact from the technical talent and API experience that you already have? What is stopping you from turning that potential into results? Ryan will share some of the steps that that GSA is taking in implementing an agency-wide API Strategy. Early successes include publishing API Standards, reviving an internal API Working Group, and creating an API documentation template and reference prototype API. Learn about the journey that GSA is on, and how you can apply similar strategies across your organization."

LF_APIStrat17_Getting Your API House In Order

LF_APIStrat

"The world is full of seas of data. Some of these seas are created and exchanged by APIs; some of them are even about APIs. Since 2014, APImetrics has accumulated over 100 GB of data on API test calls made to over 5000 API endpoints by agents deployed in cloud locations on 5 continents. There's a huge amount of insight trapped at the bottom of that sea of (in our case unlabelled) data. Getting at it would've been nearly impossible before the emergence of powerful open source deep learning libraries in the mid-2010s. APImetrics will share how we chose a deep learning library and the data munging we did to get our data to work with the library. We will explain how we were able carry out unsupervised and semi-supervised learning and discuss the insights on global API performance and quality we were able to dredge from the bottom of our sea of data. We'll provide pointers on how organizations, from startups like APImetrics to megacorporations, can use deep learning to create oceans of knowledge from their own seas of data."

LF_APIStrat17_Diving Deep into the API Ocean with Open Source Deep Learning T...

LF_APIStrat

Many companies that provide an API also include SDKs. In this talk, learn from SendGrid’s Developer Experience Engineer, Elmer Thomas about how he re-built their 7 open source SDKs (Python, PHP, C#, Ruby, Node.js, Java and Go) to support 233 API endpoints. This tale involves automated integration test creation and execution with a Swagger/OAI powered mock API server, documentation, code, examples, CLAs, backlogs and sending out swag along with some insights on what should not be automated, like HTTP clients. He will dig into the technologies that made these automations possible along with lessons learned from the various programming communities.

LF_APIStrat17_Supporting SDKs in 7 Different Programming Languages While Main...

LF_APIStrat

"Despite open data's potential to change the world, it seems that developers and open data providers are constantly in an uphill battle to make open data not only available, but usable and actively used. The obstacles facing open data’s growth and adoption vary from technical infrastructure concerns, including maintenance, APIs, open data formats, to societal ones, including the ethical and security challenges of open data and the political climate shift in some countries causing antagonism towards open data. In this talk, Shelby Switzer will dive into the origins and current state of open data globally and in the US, using concrete stories to illustrate the value of open data and its potential impact on our communities, governments, and businesses. She will explore the challenges facing the open data ecosystem, and discuss how key open source projects and standards, including Open API, have the potential to be instrumental in changing the game and positively impacting the open data movement."

LF_APIStrat17_Open Data vs. the World

LF_APIStrat

In DevSecOps “shift left” applies to application security too: developers should commit to provide API security at the earliest stages of development. In this session, Isabelle will propose an innovative strategy to address API security, in which developers collaborate with security teams and bring their business knowledge of the APIs to: 1/ Assess the API risk in terms of data and operation sensitivity 2/ Specify the input/output data formats 3/ Describe the application flow logic From the data gathered previously, tools can then generate automatically the appropriate security policies, respecting the rules set by the security teams. Isabelle will also explain how the CI/CD pipeline can leverage a containerized PEP (Policy Enforcement Point) in the different testing / QA / Pre-Production / Production environments.

LF_APIStrat17_Practical DevSecOps for APIs

LF_APIStrat

More from LF_APIStrat (20)

LF_APIStrat17_OWASP’s Latest Category: API Underprotection

LF_APIStrat17_Creating Communication Applications using the Asterisk RESTFul ...

LF_APIStrat17_Super-Powered REST API Testing

LF_APIStrat17_How Mature are You? A Developer Experience Maturity Model

LF_APIStrat17_Connect Your RESTful API to Hundreds of Others in Minutes (Zapi...

LF_APIStrat17_Things I Wish People Told Me About Writing Docs

LF_APIStrat17_Lifting Legacy to the Cloud on API Boosters

LF_APIStrat17_Contract-first API Development: A Case Study in Parallel API Pu...

LF_APIStrat17_Don't Repeat Yourself - Your API is Your Documentation

LF_APIStrat17_How We Doubled the Velocity of Our Developer Experience Team

LF_APIStrat17_API Marketing: First Comes Usability, then Discoverability

LF_APIStrat17_Standing Taller with Technology: APIs, IoT, and the Digital Wor...

LF_APIStrat17_REST API Microversions

LF_APIStrat17_I Believe You But My Enterprise Don't: Adopting Open Standards ...

LF_APIStrat17_Case Study: Cold Decision Trees

LF_APIStrat17_Getting Your API House In Order

LF_APIStrat17_Diving Deep into the API Ocean with Open Source Deep Learning T...

LF_APIStrat17_Supporting SDKs in 7 Different Programming Languages While Main...

LF_APIStrat17_Open Data vs. the World

LF_APIStrat17_Practical DevSecOps for APIs

Recently uploaded

The presentation explores the development and application of artificial intelligence (AI) from its inception to its current status in the modern world. The term "artificial intelligence" was first coined by John McCarthy in 1956 to describe efforts to develop computer programs capable of performing tasks that typically require human intelligence. This concept was first introduced at a conference held at Dartmouth College, where programs demonstrated capabilities such as playing chess, proving theorems, and interpreting texts. In the early stages, Alan Turing contributed to the field by defining intelligence as the ability of a being to respond to certain questions intelligently, proposing what is now known as the Turing Test to evaluate the presence of intelligent behavior in machines. As the decades progressed, AI evolved significantly. The 1980s focused on machine learning, teaching computers to learn from data, leading to the development of models that could improve their performance based on their experiences. The 1990s and 2000s saw further advances in algorithms and computational power, which allowed for more sophisticated data analysis techniques, including data mining. By the 2010s, the proliferation of big data and the refinement of deep learning techniques enabled AI to become mainstream. Notable milestones included the success of Google's AlphaGo and advancements in autonomous vehicles by companies like Tesla and Waymo. A major theme of the presentation is the application of generative AI, which has been used for tasks such as natural language text generation, translation, and question answering. Generative AI uses large datasets to train models that can then produce new, coherent pieces of text or other media. The presentation also discusses the ethical implications and the need for regulation in AI, highlighting issues such as privacy, bias, and the potential for misuse. These concerns have prompted calls for comprehensive regulations to ensure the safe and equitable use of AI technologies. Artificial intelligence has also played a significant role in healthcare, particularly highlighted during the COVID-19 pandemic, where it was used in drug discovery, vaccine development, and analyzing the spread of the virus. The capabilities of AI in healthcare are vast, ranging from medical diagnostics to personalized medicine, demonstrating the technology's potential to revolutionize fields beyond just technical or consumer applications. In conclusion, AI continues to be a rapidly evolving field with significant implications for various aspects of society. The development from theoretical concepts to real-world applications illustrates both the potential benefits and the challenges that come with integrating advanced technologies into everyday life. The ongoing discussion about AI ethics and regulation underscores the importance of managing these technologies responsibly to maximize their their benefits while minimizing potential harms.

Artificial Intelligence: Facts and Myths

Joaquim Jorge

GenCyber Cyber Security Day Presentation

Michael W. Hawkins

With more memory available, system performance of three Dell devices increased, which can translate to a better user experience Conclusion When your system has plenty of RAM to meet your needs, you can efficiently access the applications and data you need to finish projects and to-do lists without sacrificing time and focus. Our test results show that with more memory available, three Dell PCs delivered better performance and took less time to complete the Procyon Office Productivity benchmark. These advantages translate to users being able to complete workflows more quickly and multitask more easily. Whether you need the mobility of the Latitude 5440, the creative capabilities of the Precision 3470, or the high performance of the OptiPlex Tower Plus 7010, configuring your system with more RAM can help keep processes running smoothly, enabling you to do more without compromising performance.

Boost PC performance: How more available memory can improve productivity

Principled Technologies

Heather Hedden, Senior Consultant at Enterprise Knowledge, presented “The Role of Taxonomy and Ontology in Semantic Layers” at a webinar hosted by Progress Semaphore on April 16, 2024. Taxonomies at their core enable effective tagging and retrieval of content, and combined with ontologies they extend to the management and understanding of related data. There are even greater benefits of taxonomies and ontologies to enhance your enterprise information architecture when applying them to a semantic layer. A survey by DBP-Institute found that enterprises using a semantic layer see their business outcomes improve by four times, while reducing their data and analytics costs. Extending taxonomies to a semantic layer can be a game-changing solution, allowing you to connect information silos, alleviate knowledge gaps, and derive new insights. Hedden, who specializes in taxonomy design and implementation, presented how the value of taxonomies shouldn’t reside in silos but be integrated with ontologies into a semantic layer. Learn about: - The essence and purpose of taxonomies and ontologies in information and knowledge management; - Advantages of semantic layers leveraging organizational taxonomies; and - Components and approaches to creating a semantic layer, including the integration of taxonomies and ontologies

The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf

Enterprise Knowledge

Imagine a world where information flows as swiftly as thought itself, making decision-making as fluid as the data driving it. Every moment is critical, and the right tools can significantly boost your organization’s performance. The power of real-time data automation through FME can turn this vision into reality. Aimed at professionals eager to leverage real-time data for enhanced decision-making and efficiency, this webinar will cover the essentials of real-time data and its significance. We’ll explore: FME’s role in real-time event processing, from data intake and analysis to transformation and reporting An overview of leveraging streams vs. automations FME’s impact across various industries highlighted by real-life case studies Live demonstrations on setting up FME workflows for real-time data Practical advice on getting started, best practices, and tips for effective implementation Join us to enhance your skills in real-time data automation with FME, and take your operational capabilities to the next level.

From Event to Action: Accelerate Your Decision Making with Real-Time Automation

Safe Software

Axa Assurance Maroc - Insurer Innovation Award 2024

The Digital Insurer

Finology Group – Insurtech Innovation Award 2024

The Digital Insurer

Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...

Neo4j

Tech Trends Report 2024 Future Today Institute.pdf

hans926745

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

Product Anonymous

Boost Fertility New Invention Ups Success Rates.pdf

sudhanshuwaghmare1

A Domino Admins Adventures (Engage 2024)

Gabriella Davis

CNv6 Instructor Chapter 6 Quality of Service

giselly40

How to Troubleshoot Apps for the Modern Connected Worker

ThousandEyes

presentation ICT roal in 21st century education

jfdjdjcjdnsjd

GenAI Risks & Security Meetup 01052024.pdf

lior mazor

Three things you will take away from the session: • How to run an effective tenant-to-tenant migration • Best practices for before, during, and after migration • Tips for using migration as a springboard to prepare for Copilot in Microsoft 365 Main ideas: Migration Overview: The presentation covers the current reality of cross-tenant migrations, the triggers, phases, best practices, and benefits of a successful tenant migration Considerations: When considering a migration, it is important to consider the migration scope, performance, customization, flexibility, user-friendly interface, automation, monitoring, support, training, scalability, data integrity, data security, cost, and licensing structure Next Wave: The next wave of change includes the launch of Copilot, which requires businesses to be prepared for upcoming changes related to Copilot and the cloud, and to consolidate data and tighten governance ShareGate: ShareGate can help with pre-migration analysis, configurable migration tool, and automated, end-user driven collaborative governance

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

sammart93

BooK Now Call us at +918448380779 to hire a gorgeous and seductive call girl for sex. Take a Delhi Escort Service. The help of our escort agency is mostly meant for men who want sexual Indian Escorts In Delhi NCR. It should be noted that any impersonator will get 100 attention from our Young Girls Escorts in Delhi. They will assume the position of reliable allies. VIP Call Girl With Original Photos Book Tonight +918448380779 Our Cheap Price 1 Hour not available 2 Hours 5000 Full Night 8000 TAG: Call Girls in Delhi, Noida, Gurgaon, Ghaziabad, Connaught Place, Greater Kailash Delhi, Lajpat Nagar Delhi, Mayur Vihar Delhi, Chanakyapuri Delhi, New Friends Colony Delhi, Majnu Ka Tilla, Karol Bagh, Malviya Nagar, Saket, Khan Market, Noida Sector 18, Noida Sector 76, Noida Sector 51, Gurgaon Mg Road, Iffco Chowk Gurgaon, Rajiv Chowk Gurgaon All Delhi Ncr Free Home Deliver

08448380779 Call Girls In Diplomatic Enclave Women Seeking Men

Delhi Call girls

Discord is a free app offering voice, video, and text chat functionalities, primarily catering to the gaming community. It serves as a hub for users to create and join servers tailored to their interests. Discord’s ecosystem comprises servers, each functioning as a distinct online community with its own channels dedicated to specific topics or activities. Users can engage in text-based discussions, voice calls, or video chats within these channels. Understanding Discord Servers Discord servers are virtual spaces where users congregate to interact, share content, and build communities. Servers may revolve around gaming, hobbies, interests, or fandoms, providing a platform for like-minded individuals to connect. Communication Features Discord offers a range of communication tools, including text channels for messaging, voice channels for real-time audio conversations, and video channels for face-to-face interactions. These features facilitate seamless communication and collaboration. What Does NSFW Mean? The acronym NSFW stands for “Not Safe For Work,” indicating content that may be inappropriate for professional or public settings. NSFW Content NSFW content encompasses material that is sexually explicit, violent, or otherwise graphic in nature. It often includes nudity, profanity, or depictions of sensitive topics.

Understanding Discord NSFW Servers A Guide for Responsible Users.pdf

UK Journal

Histor y of HAM Radio presentation slide

vu2urc

Recently uploaded (20)

Artificial Intelligence: Facts and Myths

GenCyber Cyber Security Day Presentation

Boost PC performance: How more available memory can improve productivity

The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf

From Event to Action: Accelerate Your Decision Making with Real-Time Automation

Axa Assurance Maroc - Insurer Innovation Award 2024

Finology Group – Insurtech Innovation Award 2024

Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...

Tech Trends Report 2024 Future Today Institute.pdf

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

Boost Fertility New Invention Ups Success Rates.pdf

A Domino Admins Adventures (Engage 2024)

CNv6 Instructor Chapter 6 Quality of Service

How to Troubleshoot Apps for the Modern Connected Worker

presentation ICT roal in 21st century education

GenAI Risks & Security Meetup 01052024.pdf

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

08448380779 Call Girls In Diplomatic Enclave Women Seeking Men

Understanding Discord NSFW Servers A Guide for Responsible Users.pdf

Histor y of HAM Radio presentation slide

LF_APIStrat17_Keep Your Swagger On

1. Keep Your Swagger On Ron Ratovsky (@webron)

2. Swagger is… -An open source toolset -Covering portions of the API lifecycle -Supports both code-first and design-first approaches -Focused around the OpenAPISpecification Swagger is not… The OpenAPISpecification

3. Driving the API Lifecycle with OAS Design Implementation Testing Mocking Documentation Virtualization Deployment / Runtime Clients Security, Usage policies, Monitoring, Caching, etc Developer portals, Code samples, User guides, etc. Functional / Runtime simulations Functional, Security, Load, Compliance, etc. Generated server code/artifacts Prototyping Generated client libraries Object reuse, linking, Callbacks, etc.

4. The Swagger Projects 1. Swagger-core 2. Swagger-parser 3. Swagger-inflector 4. Swagger-codegen 5. Validator-badge 6. Swagger-converter 7. Swagger-js 8. Swagger-ui 9. Swagger-editor 10. Swagger-node 11. …

5. - Code-first approach - Java JAX-RS - Basis for other projects (annotations, models) - OAS3 (swagger-core 2.0): - Rewrite of annotations and models - Cleanup of set up process - Built to co-exist with 1.5 - Support utility for deserializingOpenAPIdocuments - Depends on Swagger-core’s models. - OAS3 (swagger-parser 2.0): - Convert previous versions to 3.0 - Provides 3.0 validation - More customizable with options Swagger-core Swagger-parser

6. - Design-first approach - Java JAX-RS (Jersey) - Depends on Swagger-parser - OAS3 (swagger-inflector 2.0): - Modified for OAS3 support (*) - Plans to co-exist with OAS2 support - Improved mocking capabilities - Client/Server generation - Depends on Swagger-parser - Available as a library, CLI and a service - WIP Changes (swagger-codegen3.0): - Support for 3.0 versions and older (through conversion) - Moving to handlebars - Improved CLI - Breaking out the templates - And more… Swagger-inflector Swagger-codegen

7. - Definition validation - Runs as a service - Depends on Swagger-parser - OAS3 (validator-badge 2.0): - Modified for OAS3 support (*) - Plans to co-exist with OAS2 support - New and improved API - OAS2àOAS3 conversion - Runs as a service - Depends on Swagger-parser - WIP (swagger-converter 1.0): - Pushing out the first version Validator-badge Swagger-converter

8. - Parser, resolver, client - Was recently written from scratch (prior to OAS3) - OAS3 (swagger-client 3.X): - Parse and resolve OAS3 documents - Client functionality partially implemented, still WIP. - Visualization - Depends on Swagger-js - Uses the Validator-badge - Swagger-UI 3.X: - Was recently written from scratch - Provides easier customization - Improved performance and visuals - OAS3: - Support for rendering OAS3 documents (*) - Exciting plans for links - Sandbox functionality is still WIP Swagger-js Swagger-UI

9. - OAS IDE - Depends on Swagger-UI - Uses Swagger-codegen - Swagger-Editor 3.X: - Was recently written from scratch - Provides easier customization - Improved auto-suggest - Improved validation - OAS3: - Supports OAS3 completion - OAS3 structural validation - Semantic validation is WIP - Design-first approach - Plans: - Provide support for OAS3 based on swagger-js - Break the dependency on Editor/UI - Implement similar features to Swagger- Inflector Swagger-Editor Swagger-node

10. It’s Demo Time!

11. Thank you! http://swagger.io https://github.com/swagger-api @SwaggerAPI Visit us at the booth to hear more about Swagger and SwaggerHub

LF_APIStrat17_Keep Your Swagger On

Recommended

Recommended

More Related Content

Similar to LF_APIStrat17_Keep Your Swagger On

Similar to LF_APIStrat17_Keep Your Swagger On (20)

More from LF_APIStrat

More from LF_APIStrat (20)

Recently uploaded

Recently uploaded (20)

LF_APIStrat17_Keep Your Swagger On