Why should i care about hypermedia

•

0 likes•1,330 views

This document discusses hypermedia APIs and REST. It introduces the Richardson maturity model for REST APIs, which classifies them as level 1 (RPC), level 2 (RESTful), or level 3 (hypermedia). A level 3 hypermedia API uses hyperlinks to communicate available actions and business workflows to clients. This allows client-side behavior to be driven by links, making clients act like state machines. The document provides examples comparing how a book browsing/purchasing workflow would be implemented at levels 2 and 3, demonstrating how level 3 implies business rules and updates through links.

Technology Business

Why should I care about
Hypermedia APIs?
Copenhagen May 21th 2013
Mads Enevoldsen
mads.enevoldsen@jayway.com

REST Coined
Roy Fielding [2000]:
"Architectural Styles and the
Design of Networkbased
Software Architectures"
REST polluted and HATEOAS
Hypermedia API

Richardson Maturity
Model
Martin Fowler
http://martinfowler.com/articles/richardsonMaturityModel.html

Hypermedia Controls
Human: links with names
Computer: links with 'rel'

Design of Hypermedia
API
Communicate business flow via
links
Client like a state machine

Client Side Comparison
Level 2 Level 3
Navigation
Behavior

Client Side Comparison
Level 2 Level 3
Navigation construct follow
Behavior

Client Side Comparison
Level 2 Level 3
Navigation construct follow
Behavior business rules implied by links

Example: Bookshop
Browse book catalog
Read book details
Purchase book
Download book

Level 2
Gustaf Nielson Kotte
Surviving the Zombie Apocapolypse of Connected Devices

Level 3
Gustaf Nielson Kotte
Surviving the Zombie Apocapolypse of Connected Devices

CR: Free Xmas download
Fat clients need update

CR: Free Xmas download
Skinny Clients Are OK

Framework support
@HasBoughtBook(false)
public void buy()
{...}
@HasBoughtBook(true)
public InputStream download()
{...}

During the past years, the data deluge that prevails in the World Wide Web has been accompanied by a number of APIs that expose business logic. In this paper, we discuss a novel approach to enrich existing API standards definitions with business rules. Taking advantage of the REST principles, we aim at enabling the creation of generic clients that can dynamically navigate through semantically enriched web affordances with the help of Hydrabased Hypermedia API descriptions, which encapsulate the finite state machine of possible actions into SWRL rules.

Is BCS Dead?

Jeff Fried

APIs and Linked Data: A match made in Heaven

Michael Petychakis

The Race is on: comparing Google and Microsoft's Cognitive Services

Jeff Fried

Use O365 and Azure Cognitive Services for intelligent search

Jeff Fried

Search Friendly Web AppsNikhil Kothari

Zoomdata helps you find quick and easy solutions for even the most complicated Big Data challenges. To meet their Big Data challenges, Blue Canopy designed an AWS-based Data Science Workstation (DSWS) with Zoomdata’s blazing-fast, secure data analysis and visualization platform. Blue Canopy provides information technology and cyber security solutions to US government and commercial enterprises and needed a solution that could expand the depth and breadth of their analytics capabilities for big data projects. They built a Data Science Workstation, which is a self-provisioned tool on AWS, that delivers on-demand services for data analysts.

Introduction to Artificial Intelligence on AWS

Amazon Web Services

Dukungan IBM Untuk Pengembang Lokal

Yoza Aprilio

The truth behind seo

Julia Giesbrecht (LION)

Web Service Search Engines - Enabling Of Service Commerce

miczar

Service-Orientation is the lasted paradigm for the design of future IT systems as well as for novel business strategies. Instead of proprietary solutions and offers, decoupled and reusable services shall be provided and be dynamically combined with respect to specific client requirements. seekda addresses these needs and provides the first Web Service Search engine and Marketplace. The current market is mostly based on singular service offerings, where in reality, complete integrated solutions are clearly needed. seekda facilitates the creation of service bundles. Interoperability issues between different providers are handled by the marketplace, which allows seamless switching between providers and reduces integration costs for their customers. The following questions will be discussed in this talk: - Web of Services and the Future of SaaS (Software as a Service) - How to enable Service Commerce? - Need of Semantics in an Internet of Services - Use case: eTourism

Instant Security and User Management in Spring Boot

Remy Champion

HTML Hypermedia APIs and Adaptive Web Design - Nordic APIsGustaf Nilsson Kotte

Dev sum hypemedia talkGlenn Block

AngularJS in large applications - AE NV

AE - architects for business and ict

This presentation was featured on the third AngularJS Meetup in Belgium and presented by Glenn Dejaeger, Thomas Anciaux and Pieter Herroelen, who have been working on a large AngularJS application for almost a year now. This presentation features the many challenges they have encountered and also ways to solve them, including: - structuring a large AngularJS application (and building it with grunt) - writing reusable components - using AngularJS with a hypermedia API Enjoy! AE nv

Together Cheerfully to Walk with Hypermedia

Vladimir Tsukur

Primary focus of this presentation is on the hypermedia as the engine of application state (HATEOAS) and how HTTP APIs may benefit from it. Provides sneak peek into HAL media type & gives an overview of hypermedia support in Java tools (JAX-RS / HalBuilder and Spring HATEOAS) along with practical suggestions for server-side design of hypermedia API. Also includes quick overview of Richardson Maturity Model based on a set of examples, current API trends.

Using a hypermedia API with Angular.js

Pieter Herroelen

Hypermedia in API Design: Enterprise as an Early Adopter

Apigee | Google Cloud

Sull’adattamento dell’individuo al cambiamento - Elisei

CAF CIA

Making Sense of Hypermedia APIs – Hype or Reality?Akana

The hypermedia apiInviqa

Javantura v4 - True RESTful Java Web Services with JSON API and Katharsis - M...

HUJAK - Hrvatska udruga Java korisnika / Croatian Java User Association

State of APIs: API trends from Nordic APIs Copenhagen & Sundsvall

Andreas Krohn

What's hot

O365Con18 - Invest in Search - Matthew McDermott

NCCOMMS

Accelerating Digital Transformation With Microsoft Azure And Cognitive Services

Thuan Ng

O365Con18 - Query like a Pro - Matthew McDermott

NCCOMMS

O365Con18 - Microsoft and Social, Past Present Future - Jasper Oosterveld

NCCOMMS

Technical SEO Checklist for Beginners

BristolSEO

Taking Complexity Out of Data Science with AWS and Zoomdata PPT

Amazon Web Services

Introduction to Artificial Intelligence on AWS

Amazon Web Services

Dukungan IBM Untuk Pengembang Lokal

Yoza Aprilio

The truth behind seo

Julia Giesbrecht (LION)

Web Service Search Engines - Enabling Of Service Commerce

miczar

Instant Security and User Management in Spring Boot

Remy Champion

What's hot (11)

O365Con18 - Invest in Search - Matthew McDermott

Accelerating Digital Transformation With Microsoft Azure And Cognitive Services

O365Con18 - Query like a Pro - Matthew McDermott

O365Con18 - Microsoft and Social, Past Present Future - Jasper Oosterveld

Technical SEO Checklist for Beginners

Taking Complexity Out of Data Science with AWS and Zoomdata PPT

Introduction to Artificial Intelligence on AWS

Dukungan IBM Untuk Pengembang Lokal

The truth behind seo

Web Service Search Engines - Enabling Of Service Commerce

Instant Security and User Management in Spring Boot

Viewers also liked

HTML Hypermedia APIs and Adaptive Web Design - Nordic APIsGustaf Nilsson Kotte

Dev sum hypemedia talkGlenn Block

AngularJS in large applications - AE NV

AE - architects for business and ict

Together Cheerfully to Walk with Hypermedia

Vladimir Tsukur

Using a hypermedia API with Angular.js

Pieter Herroelen

Hypermedia in API Design: Enterprise as an Early Adopter

Apigee | Google Cloud

Sull’adattamento dell’individuo al cambiamento - Elisei

CAF CIA

Making Sense of Hypermedia APIs – Hype or Reality?Akana

The hypermedia apiInviqa

Javantura v4 - True RESTful Java Web Services with JSON API and Katharsis - M...

HUJAK - Hrvatska udruga Java korisnika / Croatian Java User Association

State of APIs: API trends from Nordic APIs Copenhagen & Sundsvall

Andreas Krohn

Running an API 24/365

Nordic APIs

Authorization The Missing Piece of the Puzzle

Nordic APIs

Pie for Sale: Timeless Lessons in API Advocacy (Adam DuVander)

Nordic APIs

This is a session given by Adam Duvander at Nordic APIs 2016 Platform Summit on October 26th, in Stockholm Sweden. Description: API that nobody uses is almost as sad as a pie that nobody eats. Yet, both of these occur every day. Regardless of whether your API is for partners, internal, or external usage, it needs an advocate to help it be adopted. There are good reasons why an API gets no usage, and there’s a lot we can learn from how pies are made, sold, and consumed. Don’t expect short-term tactics, but the timeless fundamentals from Adam DuVander’s lessons learned in developer relations, within a large enterprise, and as one of the earliest journalists covering APIs. You’ll learn the importance of knowing your competition (yup, even for internal APIs), sharing your vision, being ever-present, and helping developers get started fast. And don’t forget the delicious, flaky crust. DuVander has seen the same approach work at database-as-a-service Orchestrate.io, internally at its parent company CTL.io, at his neighborhood bakery, and in discussions with hundreds of API providers over the last eight years.

Public Transport APIs – How we are using and creating long lasting APIs at No...

Nordic APIs

This is a session given by Urika Park and Petter Kvarnfors at Nordic APIs 2016 Platform Summit on October 26th, in Stockholm Sweden. Description: Nobina is the largest bus operator in the Nordic countries. With about 10 000 employees and 3600 vehicles we strive to simplify the every day traveling for our customers by deliver simple, friendly and priceworthy public transport services. In this session we share experiences from consuming the API’s from Trafiklab.se, which started in 2011 as a national initiative for public transport. One of our applications that consumes these API’s is the travel planner “Res i Sthlm”. This app has over 700 000 active end users in Stockholm who rely on it and Trafiklab for their daily transport, so we’re constantly working with reliability and quality with the data we expose. We also talk about how we contribute to European Standards for API’s in vehicles, and how we implement these standards in our vehicles/busses in traffic – in other words our IoT-units on wheels. For instance, the European initiative ITxPT and the MQTT standard. We share some thoughts and discuss with you what data we think Nobina and other bus operators will and should publish in the future from vehicles and other public transport data. When dealing with public transport, it’s extremely important to work with a long term mindset, since consequences for travelers can be severe if every operator and type of transport implements different solutions and designs.

API Creation to Iteration without the Frustration

Nordic APIs

This is a session given by Steve Rice at Nordic APIs 2016 Platform Summit on October 26th, in Stockholm Sweden. Description: Once you have an API out in the wild (be it one that’s well designed, or one that grew organically), how do you evolve that API in the future? How do you take something everyone is using in a variety of ways, and distill those needs down into improvements? This talk will walk through a recent major API version update we went through at PagerDuty from beginning to end. This will include details on what kinds of usage data we gathered, how we engaged with users of the API to understand what worked well and what didn’t, and how to break out of some of the existing antipatterns we had. Audience members of this talk will be able to walk away with strategies they can apply to their own APIs (internal or external), testing patterns to consider, and ways to communicate engineering efforts in terms of business and customer value.

Deep-dive into Microservice Outer Architecture

WSO2

To view recording of this webinar please use the below URL: http://wso2.com/library/webinars/2016/02/deep-dive-into-microservice-outer-architecture/ Microservices architecture (MSA) promotes loosely coupled services as building blocks for software system architecture. It was first adopted by large internet companies like Netflix and now is popular with enterprise architects everywhere. You may find yourself asking what the main premises of MSA are and whether it replaces SOA. In this webinar Frank and Srinath will Compare and contrast MSA with SOA and discuss both their pros and cons Examine what MSA looks like in practice Answer questions such as where to use databases, how to use security and how to perform service orchestration and integration Discuss practical challenges

Lean and Mean – Authorization for kick-ass APIs (Jonas Markström)

Nordic APIs

This is a session given by Jonas Markström at Nordic APIs 2016 Platform Summit on October 26th, in Stockholm Sweden. Description: So you’ve decided to go down the API path. You’re fitting your enterprise’s architecture with the best in REST services, micro services, and API gateways. You’ve convinced your management that opening up your most precious assets – your data – to the outside world will have considerable benefits. Just imagine: your partners, customers, and contractors will all be able to interact with your systems. Now, of course, there is just this little nagging doubt in your head: did you code that service correctly? Are you positive only the right people have access to the relevant data? Did you thoroughly test that 10,000-line code that implements access control? Of course you didn’t… Because you didn’t hard-code the authorization. You went for Attribute Based Access Control, the weapon of choice of API Ninjas. Right? In this talk, we will cover the basics of externalizing authorization using ABAC and how it can be applied to your APIs: – Secure API endpoints no matter the technology – Control access to API functionality – Control access to data: dynamic data masking – Implement access control as centrally-managed policies – Reuse the access control across other technologies in the stack. Benefits include: – Leaner APIs – Slashed development time – Faster time-to-market

Integrated social solutions, the power and pitfalls of mashups

Nordic APIs

Automotive Grade APIs – designing for longevity

Nordic APIs

This is a session given by Henrik Segesten at Nordic APIs 2016 Platform Summit on October 26th, in Stockholm Sweden. Description: In the automotive industry, the term “automotive grade” is in common use applied to hardware. It means that the hardware has been tested for longer durability and more extreme conditions than consumer grade hardware. But how does this apply to software and more specifically APIs?

Viewers also liked (20)

HTML Hypermedia APIs and Adaptive Web Design - Nordic APIs

Dev sum hypemedia talk

AngularJS in large applications - AE NV

Together Cheerfully to Walk with Hypermedia

Using a hypermedia API with Angular.js

Hypermedia in API Design: Enterprise as an Early Adopter

Sull’adattamento dell’individuo al cambiamento - Elisei

Making Sense of Hypermedia APIs – Hype or Reality?

The hypermedia api

Javantura v4 - True RESTful Java Web Services with JSON API and Katharsis - M...

State of APIs: API trends from Nordic APIs Copenhagen & Sundsvall

Running an API 24/365

Authorization The Missing Piece of the Puzzle

Pie for Sale: Timeless Lessons in API Advocacy (Adam DuVander)

Public Transport APIs – How we are using and creating long lasting APIs at No...

API Creation to Iteration without the Frustration

Deep-dive into Microservice Outer Architecture

Lean and Mean – Authorization for kick-ass APIs (Jonas Markström)

Integrated social solutions, the power and pitfalls of mashups

Automotive Grade APIs – designing for longevity

Similar to Why should i care about hypermedia

Representational State Transfer

Alexei Skachykhin

How RESTful Is Your REST?

Abdelmonaim Remani

The rise of Mobile and the diversity its technologies make exposing a RESTfull API the most crucial capability of any application and the key to its success. In the absence of widely adopted best practices and well-defined conventions, designing such an API is nothing but trivial. This presentation introduces the fundamentals of REST architecture, and discusses the principles of RESTfull design. Among the topics covered: resource modeling (URI design, and HTTP verbs/status code canonical usage), multiple representation support, testing, cache control, security (Http and OAuth), and API versioning. HATEOAS and REST maturity model are also discussed. No prior knowledge REST is required.

Web 2.0 Standard For End Useryanvns

Web2 0 Incrediblesanjeshdubey

Hypertext2007 Carole Goble Keynote - "The Return of the Prodigal Web"

hypertext2007

Web Development Presentation

TurnToTech

MongoDB.local Dallas 2019: Building Your First MongoDB App Using Atlas & Stitch

MongoDB

Jumpstart your day with an introduction to quickly building apps using the MongoDB ecosystem. We'll begin with a brief introduction to MongoDB, Atlas, and Stitch. Then watch as Lauren attempts to live-code a blogging application that stores and displays comments. Next, she'll put the application on the Internet for anyone to access. Finally, she'll implement a feature to send email notifications whenever someone comments on the blog. All in 40 minutes or less! You'll walk away with the knowledge you need to build your first app using the MongoDB ecosystem!

S+S Architecture Overview

David Solivan

Introduction to Web 2.0

Reggie Niccolo Santos

Micro-Blogging for The Enterprise (MongoDB)

toamitkumar

Detailed information on webservice by websoles

NAVEEN KUMAR SHARMA

Web services Tutorial /Websoles Strategic Digital Solutions

Ratnesh Pandey

Web services | Websoles

CRM Manager | Developer @ Websoles Strategic Digital Solutions

Best Web services tutorial | Websoles Strategic Digital Solutions

Shubham Kumar Singh

Ibm_interconnect_restapi_workshop

Shubhra Kar

Standard Web APIs for Multidisciplinary Collaboration

Axel Reichwein

Ali khalili: Towards an Open Linked Data-based Infrastructure for Studying Sc...

knowdiff

Adaptive Linked Data-driven Web Components: Building Flexible and Reusable Se...

Ali Khalili

Due to the increasing amount of Linked Data openly published on the Web, user-facing Linked Data Applications (LDAs) are gaining momentum. One of the major entrance barriers for Web developers to contribute to this wave of LDAs is the required knowledge of Semantic Web technologies such as the RDF data model and SPARQL query language. This paper presents an adaptive component-based approach together with its open source implementation for creating flexible and reusable Semantic Web interfaces driven by Linked Data. Linked Data-driven (LD-R) Web components abstract the complexity of the underlying Semantic Web technologies in order to allow reuse of existing Web components in LDAs, enabling Web developers who are not experts in Semantic Web to develop interfaces that view, edit and browse Linked Data. In addition to the modularity provided by the LD-R components, the proposed RDF-based configuration method allows application assemblers to reshape their user interface for different use cases, by either reusing existing shared configurations or by creating their proprietary configurations.

Modeling REST API's Behaviour with Text, Graphics or Both?

Ana Ivanchikj

Software Analysis for the Web: Achievements and Prospects

Ali Mesbah

Similar to Why should i care about hypermedia (20)

Representational State Transfer

How RESTful Is Your REST?

Web 2.0 Standard For End User

Web2 0 Incredibles

Hypertext2007 Carole Goble Keynote - "The Return of the Prodigal Web"

Web Development Presentation

MongoDB.local Dallas 2019: Building Your First MongoDB App Using Atlas & Stitch

S+S Architecture Overview

Introduction to Web 2.0

Micro-Blogging for The Enterprise (MongoDB)

Detailed information on webservice by websoles

Web services Tutorial /Websoles Strategic Digital Solutions

Web services | Websoles

Best Web services tutorial | Websoles Strategic Digital Solutions

Ibm_interconnect_restapi_workshop

Standard Web APIs for Multidisciplinary Collaboration

Ali khalili: Towards an Open Linked Data-based Infrastructure for Studying Sc...

Adaptive Linked Data-driven Web Components: Building Flexible and Reusable Se...

Modeling REST API's Behaviour with Text, Graphics or Both?

Software Analysis for the Web: Achievements and Prospects

More from Nordic APIs

How I Built Bill, the AI-Powered Chatbot That Reads Our Docs for Fun , by Tod...

Nordic APIs

A presentation given by Todd Kerpelman, Developer Advocate at Plaid, at our 2024 Austin API Summit, March 12-13. Session Description: Have you ever thought about building your own chatbot to help developers be more successful using your APIs? Well, we made one for Plaid’s documentation site, and in this talk, I’ll cover some of the things we learned! This presentation will cover topics like: – How does it work? What does it mean to “train” a bot on your docs? – Setting appropriate expectations: Do you still need to write documentation? Do you still need a support team? – The trade-offs around building your own vs. buying a 3rd party solution – Some decisions around the underlying tech – How to build a decent “conversational mode” so you can ask follow-up questions – How you evaluate the quality of a chatbot, and some surprises we ecountered along the way – What do you do when things go wrong? – Security considerations And much more! Actually, probably not that much more. That already sounds like a lot.

The Art of API Design, by David Biesack at Apiture

Nordic APIs

A presentation given by David Biesack, Chief API Officer at Apiture, at our 2024 Austin API Summit, March 12-13. Session Description: API Design is truly an art. While ChatGPT can spit out seemingly detailed APIs, there is still much to be said for well-crafted, consistent APIs designed by organic intelligence, in a broader context, with the consumer and Developer Experience in mind. A good (or dare we dream, great) Developer Experience (DX) is an important aspect of API design and the success of your API program. Attendees will grok the interplay of API design, patterns, and language constraints and limitations. See how and why artful API Design Matters to DX and "good" API outcomes, and why fluency in the myriad languages of APIs matters. Learn how choosing guiding principles can shape all your APIs for success. Learn how to stay relevant as an API designer when the API generating robots are breathing down your neck.

ABAC, ReBAC, Zanzibar, ALFA… How Should I Implement AuthZ in My APIs? by Dav...

Nordic APIs

A presentation given by David Brossard, CTO at Axiomatics, at our 2024 Austin API Summit, March 12-13. Session Description: So you've just built your cool new API and figured out the authentication part. You're even using OAuth for access delegation, scopes, and claims. So, you're good, right? Well what about fine-grained authorization? What about OWASP's #1 security threat, broken access control? How do you handle that? Maybe you need an authorization framework to help with that. But which one? Is ABAC the way to go? Policies? Graphs? In this presentation, we'll give you the tools to understand what authorization for APIs entails, what options you have, and how to successfully implement a secure authorization strategy for your APIs. We will cover approaches such as ALFA, ReBAC, and Zanzibar and illustrate with a live demo.

Crafting a Cloud Native API Platform to Accelerate Your Platform Maturity - B...

Nordic APIs

A presentation given by Budhaditya Bhattacharya, Developer Advocate at Tyk, at our 2024 Austin API Summit, March 12-13. Session Description: APIs and microservices are powering domain-driven design architectures and have become the fabric of modern cloud-native applications. However, focusing on technology isn't enough - there is a need for a synergy between people, processes, and tools. Based on the CNCF platform maturity model, we will look to bridge the gap between an org's current and desired platform maturity level when creating cloud-native API platforms. We'll discuss: 1. The platform team model - team topologies and key roles for developing internal API platforms 2. Processes like platform discovery, jobs-to-be-done analysis, and continuous feedback loops to understand and meet developer needs 3. Applying a "platform as a product" mindset to measure and communicate platform success 4. Architecting for discoverability, security, observability and integration capabilities 5. The role of technologies like service meshes, API gateway, identity management, internal developer portals and OpenAPI specifications

The Federated Future: Pioneering Next-Gen Solutions in API Management - Marku...

Nordic APIs

A presentation given by Markus Müller, CTO at APIIDA, at our 2024 Austin API Summit, March 12-13. Session Description: In an era where digital transformation is pivotal, the management and governance of APIs have emerged as critical components in the technological infrastructure of businesses. "The Federated Future: Pioneering Next-Gen Solutions in API Management" is a forward-looking talk that delves into the evolving landscape of API governance, with a particular focus on Federated API Management as a groundbreaking approach. Over the course of this presentation, we will explore the paradigm shift from traditional, centralized API management towards a more dynamic, federated model. This approach not only offers scalability and flexibility but also fosters innovation by enabling diverse teams to collaboratively manage APIs while adhering to consistent governance policies. Key topics include: - The current challenges in API governance and how federated management addresses these. - The principles and architecture of Federated API Management, distinguishing it from traditional models. - Real-world implications of adopting a federated approach, including case studies that illustrate its transformative impact on businesses. - Strategies for implementing Federated API Management, focusing on best practices for seamless integration. - The future outlook of API governance, anticipating emerging trends and technologies.

API Authorization Using an Identity Server and Gateway - Aldo Pietropaolo, SGNL

Nordic APIs

A presentation given by Aldo Pietropaolo, Director of Solutions Engineering at SGNL, at our 2024 Austin API Summit, March 12-13. Session Description: Securing APIs and ensuring you are protected from threats by implementing authentication and authorization while keeping the request context intact can be challenging. This session will show us how to leverage SGNL, Curity, and the Kong API Gateway to protect fictitious patient records. The session will be a technical session focused on the architecture and integration points for implementing continuous access management.

API Discovery from Crawl to Run - Rob Dickinson, Graylog

Nordic APIs

A presentation given by Rob Dickinson, VP of Engineering at Graylog, at our 2024 Austin API Summit, March 12-13. Session Description: Discovering the attack surface presented by your APIs is the first step to improving API security. But APIs are fundamentally dark and constantly changing, which presents serious challenges for security teams trying to assess and manage new risks. There are several reasonable ways to perform API discovery, but each has its own tradeoffs and implications about what is actually being counted. This talk covers taking an API discovery program from start to best-of-breed, and strategies for measuring and monitoring your API attack surface.

Productizing and Monetizing APIs - Derric Gilling, Moseif

Nordic APIs

A presentation given by Derric Gilling, CEO of Moseif, at our 2024 Austin API Summit, March 12-13. Session Description: The talk would target product owners looking to turn APIs into revenue centers. Specifically, how to price and package APIs, different strategies around prepaid, postpaid, and PAYG billing, and how to choose the right metric to charge, etc. Then, we’ll chat on the go-to-market to drive developer adoption.

Securely Boosting Any Product with Generative AI APIs - Ruben Sitbon, Sipios

Nordic APIs

A presentation given by Ruben Sitbon, Lead Solutions Architect at Sipios, at our 2024 Austin API Summit, March 12-13. Session Description: ChatGPT has been a tidal wave, changing forever the way people and companies perceive the value of Artificial Intelligence. Many startups have launched products with ChatGPTI at its core, innovative SaaS players have all integrated Generative AI extensions or plugins, but it is now clear that users will be expecting more and more Generative AI to boost the features of products they use on a daily basis. In this talk, I will describe how a framework relying on Generative AI in-house APIs that allows: - Easily « boosting » any product feature with Generative AI - Improving the answers through a « trainer API » that allows experts to improve the accuracy and tone of the model - Bundling security and continuous compliance in the APIs to enjoy the benefits even within risk averse large corporates.

Security of LLM APIs by Ankita Gupta, Akto.io

Nordic APIs

A presentation given by Ankita Gupta, Co-Founder and CEO, Akto.io, at our 2024 Austin API Summit, March 12-13. Session Description: In this session, I will talk about API security of LLM APIs, addressing key vulnerabilities and attack vectors. The purpose is to educate developers, API designers, architects and organizations about the potential security risks when deploying and managing LLM APIs. 1. Overview of Large Language Models (LLMs) APIs 2. Understanding LLM Vulnerabilities: - Prompt Injections - Sensitive Data Leakage - Inadequate Sandboxing - Insecure Plugin Design - Model Denial of Service - Unauthorized Code Execution - Input attacks - Poisoning attacks 3. Best practices to secure LLM APIs from data breaches I will explain all the above using real life examples.

I'm an API Hacker, Here's How to Go from Making APIs to Breaking Them - Katie...

Nordic APIs

A presentation given by Katie Paxton-Fear, API Security Educator, Traceable AI, at our 2024 Austin API Summit, March 12-13. Session Description: Have you ever wanted to be the villain or anti-hero? In this talk, we'll cover how to hack APIs, with permission, of course. First, we'll look at the tools of the trade for API hackers, some of the most common security vulnerabilities and how we test for them, and finally, I'll tell some of my API hacking stories. The aim of the session will be to learn a little API hacking and encourage people to have a go at API hacking themselves. Participants will also join me as I hack live, giving suggestions for the next steps, for an interactive and engaging session.

Unleashing the Potential of GraphQL with Streaming Data - Kishore Banala, Net...

Nordic APIs

A presentation given by Kishore Banala, Senior Software Engineer, Netflix, at our 2024 Austin API Summit, March 12-13. Session Description: Extend the advantages of GraphQL beyond the UI layer by creating data streams that seamlessly transfer data from Federated GraphQL to your preferred destination. This presentation explores the myriad use cases that can be unleashed, such as Search, Analytics etc., sparing you from the complexity of extensive ETL jobs. Join us for an in-depth exploration of the advantages that arise from seamlessly connecting GraphQL with data streams, opening new dimensions of efficiency and capability.

Reigniting the API Description Wars with TypeSpec and the Next Generation of...

Nordic APIs

A presentation given by Gareth Jones, API Architect at Microsoft, at our 2024 Austin API Summit, March 12-13. Session Description: Didn't the API description wars end in 2017 when we all agreed that OAS was the way forward? Yes, and yet how satisfied with your API descriptions are you? Are they thousands of lines of hard to read yaml or JSON? When someone makes a change, is it easy to review for correctness and completeness? Do visual tools make this easier? Do they support change management? I'll make the case that the next generation of more abstract DSLs for defining APIs such as Smithy from Amazon and TypeSpec, open sourced by Microsoft, move us back to a more intentional approach to design and give us the opportunity to highlight the business characteristics that matter most at design-time.

Establish, Grow, and Mature Your API Platform - James Higginbotham, LaunchAny

Nordic APIs

A presentation given by James Higginbotham, Executive API Consultant, LaunchAny, at our 2024 Austin API Summit, March 12-13. Session Description: Building and growing an API platform takes more than building and organizing your APIs. It requires understanding the needs of your ecosystem, establishing lightweight processes that drive discoverability, providing the resources for self-service enablement, and delivering a federated API coach program to scale your efforts. This talk will explore the practices and patterns implemented by global organizations that will help your API ecosystem shift from a functional program to a transformational API platform.

Inclusive, Accessible Tech: Bias-Free Language in Code and Configurations - A...

Nordic APIs

A presentation given by Adrienne Moherek, Developer Experience Technical Leader, Cisco, at our 2024 Austin API Summit, March 12-13. Session Description: Heard of suss? You can suss out more information or you can find someone’s information to be suss. “Suss” shows the flexibility of language. It’s an ongoing process to change how we use certain words. It’s important to choose words carefully to convey the correct meaning and avoid harmful subtext or exclusion. Let’s explore some of the tools and triage methods that it takes from an engineering viewpoint to make bias-free choices. How can you ensure that biased words do not sneak into code, UI, docs, configurations, or our everyday language? First, let’s walk through how to take an inventory of assets from code to config files to API specifications to standards. Next, by placing those findings into categories, prioritize the work to substitute with inclusive alternatives. Let’s examine some examples using both API and code assets. Next is a demonstration of how to automate analyzing your source code or documentation with a linter, looking for patterns based on rules that are fed into the tool. What’s in the future for these efforts? Inclusive language should expand beyond English and North America efforts. To do so, let’s organize the work with automation tooling, as engineers do.

Going Platinum: How to Make a Hit API by Bill Doerrfeld, Nordic APIs

Nordic APIs

A presentation given by Bill Doerrfeld, Editor in Chief of Nordic APIs, at our 2024 Austin API Summit, March 12-13. Session Description: As it turns out, making a hit API is a lot like making a hit music album. You have to find a niche, you need good naming, and you need quality content. Also, on the production side, design, style, experience, and collaboration all matter a lot. At the end of the day, both are products, requiring the right management tools, marketing know-how, and infrastructure to scale. In this SXSW-inspired opening keynote, I'll look into the parallels between the two endeavors, providing a fun and informative look into specific things API providers should be considering on their journey toward becoming API platform rockstars.

Getting Better at Risk Management Using Event Driven Mesh Architecture - Ragh...

Nordic APIs

A presentation given by Raghavan Sadagopan, Sr. Director from CapitalOne & Lakshmi Narayana, Sr. Lead Software Engineer from CapitalOne, at our 2024 Austin API Summit, March 12-13. Session Description: Managing Risk is critical to the success of an organization. Managing Risks starts with identifying potential Risks which in the digital world are signals emanating from varying source systems. Identifying potential risks real-time enables organizations to mitigate / better prepare for potential exposures. The session will share our point of view on implementing an API centric event mesh architecture that routes events in real-time through a scalable and resilient cloud-native service on AWS.

GenAI: Producing and Consuming APIs by Paul Dumas, Gartner

Nordic APIs

A presentation given by Paul Dumas, Senior Director Analyst at Gartner, at our 2024 Austin API Summit, March 12-13. Session Description: GenAI will be, well, generating APIs. We are entering the era where software creates software. It will develop APIs faster than humans are capable of. Humans cannot compete with this compute power. How do we marshal this power, govern what it produces, and leverage it to support our business objectives and strategies? We will become more dependent on the capabilities we have as humans that elude machines. This talk provides insight to software leaders about the challenges of leading and managing this new software development power. The key lies in skills that are unique to humans: foresight, intuition, and agility.

The SAS developer portal –developer.sas.com 2.0: How we built it by Joe Furb...

Nordic APIs

A presentation given by Joe Furbee, Developer Advocate and Developers Communities Manager at SAS Institute, at our 2024 Austin API Summit, March 12-13. Session Description: Sure, we could have hired someone to (re)create our developer portal, developer.sas.com. However, we wanted the freedom to build our portal from the ground up. But, it takes more than an API architect and a developer advocate to create a modern, interactive developer experience. This session provides an overview of the steps we took to relaunch the SAS AI and analytics platform developer portal. Who was involved? How did we accomplish what we wanted to build? We’ll explore the stakeholders involved, the importance of open-source technologies, and why focusing on the developer’s perspective matters. This is not a marketing pitch to promote SAS services. Instead, it’s a detailed look at the process we followed to deploy our new developer portal.

How Netflix Uses Data Abstraction to Operate Services at Scale - Vidhya Arvin...

Nordic APIs

A presentation given by Vidhya Arvind, Staff Software Engineer, Netflix, at our 2024 Austin API Summit, March 12-13. Session Description: At Netflix, Data abstraction plays a pivotal role in hosting 100s of use cases that scale, they are widely adopted and depended on by mission-critical systems. In this talk, I show how to design reliable APIs and layout data for Key-Value services for petabyte-scale datasets. Key-value service uses a control plane and data plane to abstract the data, uses some novel techniques to reliably store and safely scale the service to 100s of instances.

More from Nordic APIs (20)

How I Built Bill, the AI-Powered Chatbot That Reads Our Docs for Fun , by Tod...

The Art of API Design, by David Biesack at Apiture

ABAC, ReBAC, Zanzibar, ALFA… How Should I Implement AuthZ in My APIs? by Dav...

Crafting a Cloud Native API Platform to Accelerate Your Platform Maturity - B...

The Federated Future: Pioneering Next-Gen Solutions in API Management - Marku...

API Authorization Using an Identity Server and Gateway - Aldo Pietropaolo, SGNL

API Discovery from Crawl to Run - Rob Dickinson, Graylog

Productizing and Monetizing APIs - Derric Gilling, Moseif

Securely Boosting Any Product with Generative AI APIs - Ruben Sitbon, Sipios

Security of LLM APIs by Ankita Gupta, Akto.io

I'm an API Hacker, Here's How to Go from Making APIs to Breaking Them - Katie...

Unleashing the Potential of GraphQL with Streaming Data - Kishore Banala, Net...

Reigniting the API Description Wars with TypeSpec and the Next Generation of...

Establish, Grow, and Mature Your API Platform - James Higginbotham, LaunchAny

Inclusive, Accessible Tech: Bias-Free Language in Code and Configurations - A...

Going Platinum: How to Make a Hit API by Bill Doerrfeld, Nordic APIs

Getting Better at Risk Management Using Event Driven Mesh Architecture - Ragh...

GenAI: Producing and Consuming APIs by Paul Dumas, Gartner

The SAS developer portal –developer.sas.com 2.0: How we built it by Joe Furb...

How Netflix Uses Data Abstraction to Operate Services at Scale - Vidhya Arvin...

Recently uploaded

UiPath Community Day Dubai: AI at Work..

UiPathCommunity

Welcome to the first live UiPath Community Day Dubai! Join us for this unique occasion to meet our local and global UiPath Community and leaders. You will get a full view of the MEA region's automation landscape and the AI Powered automation technology capabilities of UiPath. Also, hosted by our local partners Marc Ellis, you will enjoy a half-day packed with industry insights and automation peers networking. 📕 Curious on our agenda? Wait no more! 10:00 Welcome note - UiPath Community in Dubai Lovely Sinha, UiPath Community Chapter Leader, UiPath MVPx3, Hyper-automation Consultant, First Abu Dhabi Bank 10:20 A UiPath cross-region MEA overview Ashraf El Zarka, VP and Managing Director MEA, UiPath 10:35: Customer Success Journey Deepthi Deepak, Head of Intelligent Automation CoE, First Abu Dhabi Bank 11:15 The UiPath approach to GenAI with our three principles: improve accuracy, supercharge productivity, and automate more Boris Krumrey, Global VP, Automation Innovation, UiPath 12:15 To discover how Marc Ellis leverages tech-driven solutions in recruitment and managed services. Brendan Lingam, Director of Sales and Business Development, Marc Ellis

Secstrike : Reverse Engineering & Pwnable tools for CTF.pptx

nkrafacyberclub

Pushing the limits of ePRTC: 100ns holdover for 100 days

Adtran

FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf

FIDO Alliance

RESUME BUILDER APPLICATION Project for students

KAMESHS29

Video Streaming: Then, Now, and in the Future

Alpen-Adria-Universität

In his public lecture, Christian Timmerer provides insights into the fascinating history of video streaming, starting from its humble beginnings before YouTube to the groundbreaking technologies that now dominate platforms like Netflix and ORF ON. Timmerer also presents provocative contributions of his own that have significantly influenced the industry. He concludes by looking at future challenges and invites the audience to join in a discussion.

Free Complete Python - A step towards Data Science

RinaMondal9

FIDO Alliance Osaka Seminar: Passkeys at Amazon.pdf

FIDO Alliance

Accelerate your Kubernetes clusters with Varnish Caching

Thijs Feryn

Removing Uninteresting Bytes in Software Fuzzing

Aftab Hussain

Imagine a world where software fuzzing, the process of mutating bytes in test seeds to uncover hidden and erroneous program behaviors, becomes faster and more effective. A lot depends on the initial seeds, which can significantly dictate the trajectory of a fuzzing campaign, particularly in terms of how long it takes to uncover interesting behaviour in your code. We introduce DIAR, a technique designed to speedup fuzzing campaigns by pinpointing and eliminating those uninteresting bytes in the seeds. Picture this: instead of wasting valuable resources on meaningless mutations in large, bloated seeds, DIAR removes the unnecessary bytes, streamlining the entire process. In this work, we equipped AFL, a popular fuzzer, with DIAR and examined two critical Linux libraries -- Libxml's xmllint, a tool for parsing xml documents, and Binutil's readelf, an essential debugging and security analysis command-line tool used to display detailed information about ELF (Executable and Linkable Format). Our preliminary results show that AFL+DIAR does not only discover new paths more quickly but also achieves higher coverage overall. This work thus showcases how starting with lean and optimized seeds can lead to faster, more comprehensive fuzzing campaigns -- and DIAR helps you find such seeds. - These are slides of the talk given at IEEE International Conference on Software Testing Verification and Validation Workshop, ICSTW 2022.

Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...

James Anderson

Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management. The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM). Speakers: Bob Boule Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle. Gopinath Rebala Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.

Assure Contact Center Experiences for Your Customers With ThousandEyes

ThousandEyes

Introduction to CHERI technology - Cybersecurity

mikeeftimakis1

Essentials of Automations: The Art of Triggers and Actions in FME

Safe Software

In this second installment of our Essentials of Automations webinar series, we’ll explore the landscape of triggers and actions, guiding you through the nuances of authoring and adapting workspaces for seamless automations. Gain an understanding of the full spectrum of triggers and actions available in FME, empowering you to enhance your workspaces for efficient automation. We’ll kick things off by showcasing the most commonly used event-based triggers, introducing you to various automation workflows like manual triggers, schedules, directory watchers, and more. Plus, see how these elements play out in real scenarios. Whether you’re tweaking your current setup or building from the ground up, this session will arm you with the tools and insights needed to transform your FME usage into a powerhouse of productivity. Join us to discover effective strategies that simplify complex processes, enhancing your productivity and transforming your data management practices with FME. Let’s turn complexity into clarity and make your workspaces work wonders!

The Metaverse and AI: how can decision-makers harness the Metaverse for their...

Jen Stirrup

The Metaverse is popularized in science fiction, and now it is becoming closer to being a part of our daily lives through the use of social media and shopping companies. How can businesses survive in a world where Artificial Intelligence is becoming the present as well as the future of technology, and how does the Metaverse fit into business strategy when futurist ideas are developing into reality at accelerated rates? How do we do this when our data isn't up to scratch? How can we move towards success with our data so we are set up for the Metaverse when it arrives? How can you help your company evolve, adapt, and succeed using Artificial Intelligence and the Metaverse to stay ahead of the competition? What are the potential issues, complications, and benefits that these technologies could bring to us and our organizations? In this session, Jen Stirrup will explain how to start thinking about these technologies as an organisation.

Leading Change strategies and insights for effective change management pdf 1.pdf

OnBoard

FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf

FIDO Alliance

A tale of scale & speed: How the US Navy is enabling software delivery from l...

sonjaschweigert1

Rapid and secure feature delivery is a goal across every application team and every branch of the DoD. The Navy’s DevSecOps platform, Party Barge, has achieved: - Reduction in onboarding time from 5 weeks to 1 day - Improved developer experience and productivity through actionable findings and reduction of false positives - Maintenance of superior security standards and inherent policy enforcement with Authorization to Operate (ATO) Development teams can ship efficiently and ensure applications are cyber ready for Navy Authorizing Officials (AOs). In this webinar, Sigma Defense and Anchore will give attendees a look behind the scenes and demo secure pipeline automation and security artifacts that speed up application ATO and time to production. We will cover: - How to remove silos in DevSecOps - How to build efficient development pipeline roles and component templates - How to deliver security artifacts that matter for ATO’s (SBOMs, vulnerability reports, and policy evidence) - How to streamline operations with automated policy checks on container images

DevOps and Testing slides at DASA Connect

Kari Kakkonen

Quantum Computing: Current Landscape and the Future Role of APIs

Vlad Stirbu