DeveloperWeek 2025: Full Schedule

arrow_back View All Dates

1:30pm PST

[Virtual] OpenAPI Summit: No AI without APIs

Wednesday February 19, 2025 1:30pm - 1:55pm PST

Jeremy Snyder, Firetail, CEO

Application Programming Interfaces (APIs) and Artificial Intelligence (AI) are two of the most important developments in tech of the last 10 years. While AI has grabbed the majority of headlines lately, APIs are the unsung heroes, the “connective tissue” that ensures seamless integration across our digital lives. But how will the more recent emergence of AI affect API security, and how do APIs affect the security of AI?
In this talk, we’ll explore these two hot topics that make our online worlds work. AI can be helpful to API security by allowing security teams to automate certain processes or make testing more efficient, but it can also be used to help malicious actors automate their attacks.

Speakers

Jeremy Snyder

CEO, FireTail

Jeremy is the founder and CEO of FireTail.io, an end-to-end API security startup. Prior to FireTail, Jeremy worked in M&A at Rapid7, a global cyber leader, where he worked on the acquisitions of 3 companies during the pandemic. Jeremy previously led sales at DivvyCloud, one of the... Read More →

Wednesday February 19, 2025 1:30pm - 1:55pm PST
VIRTUAL Dev Exec World https://app.events.ringcentral.com/events/developerweek-productworld-ai-devworld-2025/reception

Dev Exec World

Tracks & Topics APIs & Microservices, DevOps, Security Certificate, Cloud Management Certificate
Session Type OPEN Session
Conferences OPEN Session, OpenAPI Summit, Virtual, AI DevWorld, OpsWorld
In-Person/Virtual Virtual

2:00pm PST

[Virtual Exclusive] OWASP Security Summit: Building a Network Telemetry Platform to minimize Security Threats

Wednesday February 19, 2025 2:00pm - 2:25pm PST

VIRTUAL Dev Security World

Siri Varma Vegiraju, Microsoft, Senior Software Engineer

Maintaining robust network security in the cloud environment is more crucial than ever. This talk explores the design and implementation of a proactive network telemetry platform that strengthens infrastructure security. The platform collects and analyzes telemetry data from virtual machines to identify and scrutinize traffic patterns deviating from industry-standard baselines. By generating actionable insights and promptly notifying relevant teams of potential issues, it enables swift problem resolution. This proactive approach significantly reduces the attack surface, minimizes exposure to network attacks, and enhances overall cloud security.

Speakers

Siri Varma Vegiraju

Senior Software Engineer, Microsoft

Siri Varma Vegiraju is a seasoned professional in healthcare, cloud computing, and security. Currently, he focuses on securing Azure Cloud workloads, leveraging his extensive experience in distributed systems and real-time streaming solutions. Prior to his current role, Siri contributed... Read More →

Wednesday February 19, 2025 2:00pm - 2:25pm PST
VIRTUAL Dev Security World https://app.events.ringcentral.com/events/developerweek-productworld-ai-devworld-2025/reception

Dev Security World

Tracks & Topics APIs & Microservices, Security Certificate, Cloud Management Certificate
Session Type OPEN Session
Conferences Dev Security World, Virtual, OWASP Certified
In-Person/Virtual Virtual, Virtual Exclusive

2:30pm PST

[Virtual] OWASP Security Summit: API Security 101: How to Not Be Featured in a Top Ten Breaches List

Wednesday February 19, 2025 2:30pm - 2:55pm PST

VIRTUAL Dev Security World

Dan Barahona, APISec, Co-Founder

This talk will dive into the fundamentals and best practices for API Security. By understanding the 3 Pillars of API Security, encompassing governance, testing and monitoring, attendees will gain a comprehensive understanding of the essential elements required to safeguard APIs. The session will conclude with practical insights, offering best practices and valuable do's and don'ts for implementing and maintaining secure APIs.

Why are APIs under attack?
-83% of internet traffic are APIs
-APIs are under-secured

How do APIs get attacked?
Attackers look for APIs that are over-permissioned, return to much information, access unauthorized functions, and expose logic flaws. Attackers are able to bypass a web or mobile app and hit the API directly.

OWASP top 10!!
#1-#4 are the biggest issues

More compliance regulations are including testing APIs.
-PCI
-HIPPA
-GDPR
-FedRAMP

Speakers

Dan Barahona

Co-Founder, APIsec University

Dan is a 20+ year cybersecurity veteran, having held exec positions at companies including Qualys, ArcSight, Anomali and APIsec. He founded APIsec University in 2022 to offer free, non-vendor training on API security. The site has grown to over 50,000 students in its first 6 months... Read More →

Wednesday February 19, 2025 2:30pm - 2:55pm PST
VIRTUAL Dev Security World https://app.events.ringcentral.com/events/developerweek-productworld-ai-devworld-2025/reception

Dev Security World

Tracks & Topics APIs & Microservices, Security Certificate, API Certificate
Session Type OPEN Session
Conferences Dev Security World, Virtual, OPEN Session, OWASP Certified
In-Person/Virtual Virtual