DeveloperWeek Management 2024 + AI DevSummit 2024 (+ DW Europe/LATAM 2024)

Tomáš Soukal, Talsec, Security Consultant

You should attend this talk if you want to know how mobile apps & APIs are being hacked and what you need to do to protect them. We will explore large-scale attacks targeting backend APIs like botnets, fake registrations, and token hijacking. Whether you're a developer, security professional, or anyone invested in securing mobile applications, this talk equips you with practical insights and proactive measures to safeguard against evolving cyber threats. The talk is aligned with current OWASP MAS practices, focusing on architecture, resiliency, network, and storage areas. Join to stay ahead in protecting your digital assets.

Christos Chatzis, Orfium, Associate Director of Engineering
Dimitris Kalaitzidis, Orfium, Director of Engineering

In this presentation, the ambitious journey undertaken by Orfium in its integration with a competitor will be explored, signifying the dawn of a new epoch in our sector. Attention will be drawn to the complex process where two distinct companies were merged into a unified, cohesive organization. The challenges encountered – ranging from the merging of diverse corporate cultures and work methodologies, to the intricacies involved in combining product lines and reconciling differences between cloud-based and on-premises infrastructures – will be detailed. Additionally, the strategies employed to bridge knowledge gaps will be discussed. Emphasis will be placed on how these challenges were successfully navigated and transformed into a narrative of triumph. To conclude, insights and lessons gleaned from this audacious integration will be shared, providing a blueprint for similar endeavors in the future. Attendees are invited to an informative session on the dynamics of successful corporate mergers, presented in a comprehensive and enlightening manner. 

Karol Rogowski, SoftwareHut, Head of Engineering

Minimal API is a powerful tool for developers looking to build lightweight and efficient web applications. Unlike traditional web frameworks that can be cumbersome and difficult to work with, Minimal API streamlines the development process by providing a simple, yet effective, interface for creating RESTful APIs. With Minimal API, developers can easily define routes, handle HTTP requests and responses, and implement middleware with just a few lines of code. This results in faster development times, improved performance, and reduced complexity. Whether you're building a small application or a large-scale API, Minimal API is the perfect tool for the job. 

Frank Kilcommins, SmartBear, Principal API Technical Evangelist

The disruptive power of AI comes in its ability to truly assist humans. For AI models to carry out meaningful actions upon our request, they need to leverage APIs under the hood. Interacting with APIs consistently is cumbersome for large language models, mainly down varying levels of quality in APIs and their accompanying reference documentation across the industry.

With the intersection of AI and APIs being the nucleus of technical innovation for the years ahead, the question that stands out is: Are we ready for this wave of AI (machine) API consumers? The answer: The Arazzo Specification is coming just at the right time!

The new Arazzo Specification, developed under the OpenAPI Initiative, which enables the ability to craft workflows, a series of API calls, in a human- and machine-readable format. The value on offer from API endpoints can be well understood and consumed faster, making it easier to achieve a specific goal for traditional human consumers – as well as the new wave of AI consumers.

The Arazzo Specification can provide a sufficient level of predictable determinism to AI models, allowing them to offer a natural language abstraction on top of the business use cases, while in parallel giving interoperability benefits to the actual API providers. The result is more value, with less vendor lock-in, and consistent API offerings for both humans and the new wave of AI consumers.

The benefits for human consumers are equally valuable, and the Arazzo Specification affords the ability to unlock API value and improve developer experience for API producers and consumers.

Overall, the Arazzo Specification improves the capability of API specifications to tell the story of the API in a manner that improves interoperability across industries. Join this talk to learn more!

Joseph Katsioloudes, GitHub, Security Lab

In a world where security training often feels like a mundane chore, discover the refreshing impact of gamification and turn learning into an enjoyable experience. Embark on an insightful journey as we unveil the success story of gh.io/securecodegame, an open-source game hosted on GitHub Skills, that attracted over 3,000 developers within the first 6 months.

This session will provide you with an exclusive behind-the-scenes perspective, offering valuable insights and practical strategies to revolutionize various aspects of security training for your benefit. We’ll explore a case study from a tech startup that observed, among the developers who played the game, an increased sense of ownership for code security, improved communication with security teams, and a strong willingness to embrace further security training.

Noah Jelich, Hacken, Lead Security Researcher

WebAssembly (Wasm) has seen widespread adoption, yet a significant challenge persists—lack of support for comprehensive test coverage solutions like LLVM. In the realm of blockchain, where code vulnerabilities can have severe consequences, relying on automated testing becomes paramount. This presentation delves into the limitations of current test coverage suites for Wasm and introduces an innovative solution - WasmCov. Developed by Noah Jelich and Bartosz Barwikowski at Hacken, WasmCov pioneers the field of Wasm module coverage, providing a robust testing tool to fortify smart contract development in blockchain environments.

Join us as we unveil WasmCov and explore its potential to redefine the reliability and security of Wasm-based smart contracts.

Edoardo Dusi, SparkFabrik, Developer Relations Engineer

During this presentation, we will analyze the current state of security in the JavaScript ecosystem. We will cover a range of topics, including common vulnerabilities, attack vectors, mitigation strategies, security tools and frameworks, and best practices. Additionally, we will discuss the role of OpenSSF, a collaborative initiative that aims to enhance the security of open source software. Node.js has been selected as the first project to receive funding and assistance from its Alpha-Omega initiative, which strives to improve the security of critical open source projects. By the end of this talk, you will have a clearer understanding of the current state of security in JavaScript and how we can improve our security practices. 

Mackenzie Jackson, GitGuardian, Developer and security advocate

Take a step into the world of black hat hacking groups and follow them step by step through a supply chain attack.

Software supply chain attacks have forever changed the security landscape, enabling attackers to target more victims with increasingly sophisticated attacks. But how do these supply chain attacks unfold in reality? This talk reviews high-profile attacks and then recreates the steps through a series of live demos to uncover and unmask how supply chain attacks unfold and how we can prevent them. We focus on three methods of attacking the supply chain:
Attacking the CI/CD pipeline
Breaching the version control systems (VCS)
Poisoning open-source dependencies
Abusing AI package hallucinations

At the end of the presentation, we'll synthesize our findings into effective  

Julien Jakubowski, StreamNative, Developer Advocate

Today, when you think about building event-driven and real-time applications, the words that come to you spontaneously are probably: RabbitMQ, ActiveMQ, or Kafka. These are the solutions that dominate this landscape. But have you ever heard of Apache Pulsar?

After a brief presentation of the fundamental concepts of messaging, you'll discover the Apache Pulsar features that enable you to build amazing event-driven applications.
You'll learn the following:
- how Apache Pulsar architecture differs from other brokers
- how it enables scaling processing power & data independently, quickly, and with no hassle
- how it guarantees high durability of messages across nodes and different data centers
- how it covers the use cases of both RabbitMQ & Kafka while involving a single broker
- how to integrate Pulsar with your existing application portfolio
- and more

Daniel Drack, FullStackS GmbH, Senior DevOps Engineer

Everybody is talking about SBOM, attestation, MFA, signatures and other security measures - but who is actually implementing them?

This session mixes things up with a hybrid approach, based on the insights from a master's thesis that looks into how people are adopting security measures in software supply chains. We'll take a journey through the bits and pieces of cloud-native software supply chains, spotlighting the security steps for each part. Expect a friendly chat about what's currently working best, the bumps we might hit along the way, and some cool tools that can help. Plus, we've got some fresh data on how these practices are catching on (or not) in the real world, straight from our survey. This talk is your ticket to understanding the now of supply chain security and seeing how much of it is actually being put to use.

François Martin, Karakun AG, Senior Full Stack Software Engineer

Tree shaking is a feature that is used by modern bundlers to keep bundle size down (and load times fast), but if just one import is written in a non-optimal way, this can result in the whole dependency being included in the bundle. In some cases, this even happens with automatically suggested imports by the IDE. Learn about the correct way of importing from dependencies, tricks you can use to easily determine the impact on bundle size, and why having a lot of dependencies may not be as bad as you think! 

Daniel Idlis, OwnID, Senior Software Engineer

In this lecture I will walk you through the load testing & infrastructure performance optimization journey that I led at OwnID so you can learn how we were able to make our product more robust, resilient and cost-efficient.
This real-life case study will demonstrate how we were able to gain more confidence in our product's infrastructure performance and reduce AWS costs by thousands of dollars a month.
 

Aldan Creo, Accenture The Dock, Technology Research Specialist

Have you ever wondered how other people feel when they talk to you? Now you'll know!

In this session we'll take our WhatsApp message history and use it to train our own versions of ChatGPT. Your experiences, your opinions, your secrets... We'll use them all to build a chatbot that speaks and thinks like you. Your digital twin!

But be careful! Talking to yourself can be very addictive. Please don't leave your friends and loved ones for your self-AI :)

Join us! We'll keep things simple, no previous knowledge required!

Juarez Junior, Oracle, Software Engineering, Solutions Architecture, Developer Relations

This talk will explore the main architectural blueprints for Java GenAI Applications. It will provide some reference architectures and solutions for building LLM-based agents. Code examples with Spring AI, LangChain4J and OpenAI will be presented, along with vector databases.

The talk comprises the most common design patterns for building GenAI solutions with Java, offering insights on addressing the most typical requirements for such applications, approaching recurrent problems, and breaking them into manageable components to unlock the potential of LLMs with Java.

Daniel Paulus, Delegate, Managing Consultant

In this session, we'll explore the world of Azure Kubernetes Service (AKS) and discover how it's the backbone for integrating cutting-edge Azure services, like Azure OpenAI, into your applications.

I'll also show you how to craft resilient, scalable applications like a pro, using modern practices to enhance your infrastructure's scalability and reliability. Plus, we'll explore the ins and outs of automation with CI/CD using GitHub, so your projects stay ahead in the race.

By joining me in this session, you'll gain a deep understanding of how to architect and deploy impactful, intelligent applications on Azure. And let's be real - who doesn't want to be a digital superstar? So, grab a seat, and let's get started on taking your Azure app development game to the next level!

Sebastiano Galazzo, Maia, Artificial intelligence researcher

From a "simple" finetuning to your own Mixture of Expert model using opensource models.
Nowadays training from scratch an LLM is a so huge effort also for very big company. Starting from pre-trained models to create your own model is no more a way for resourceless companies, but a often a must starting point.

- Lora
- Quantization and QLora
- Injecting embeddinds model into Lora to manage multiple Lora adapters.
- Mixing models
- Creating your MoE (Mixture of experts) model using several finetuned (Your own) models

Renaldi Gondosubroto, Seek Limited, Software Engineer

In the constantly evolving landscape of Cloud Operations (CloudOps), IT operations professionals grapple with the massive task of monitoring, maintenance, and installation of servers, networks, and other essential IT infrastructures. Given the acceleration of API proliferation and automation services, the quintessential role of Ops teams is undergoing a sea change, notably with the formidable presence of cloud vendors such as AWS, GCP, and Azure. Drawing inspiration from this trend, the talk navigates through an unprecedented venture where AI Large Language Models (LLMs) synergize with AWS to carve out a novel pathway in CloudOps - Automated CloudOps Diagnostics. Delving deep into this innovative approach, the session elucidates the conceptualization and realization of a state-of-the-art diagnostic tool leveraging the prowess of LLMs coupled with AWS’s vast array of services.The exploration begins with a spotlight on the formulation phase where AWS Lambda and AWS Step Functions stand as the pivotal components in orchestrating a seamless workflow, thereby automating the diagnostic process. Moreover, the presentation sheds light on the role of LLMs in intelligently parsing the enormous datasets to identify patterns and anomalies that could potentially affect the operational dynamics, offering insights into how DevOps teams can revitalize their strategies by relying on AI-driven analytical tools. As the narrative unfolds, the audience gains a closer look at the real-time application of the tool, encompassing a detailed breakdown of its intricate functioning. Here, the integration of GPT-4 facilitates an interactive dashboard that translates complex diagnostic data into intuitive, easy-to-understand reports, essentially bridging the gap between raw data and actionable insights.The session navigates through the multi-faceted dimensions of the deployment phase, bringing forth critical reflections on the operational successes and failures, and the lessons learned in the process. It encompasses an honest discourse on the practical challenges encountered, and how the tool evolved through a series of iterations, constantly honing its capabilities to meet the dynamic demands of CloudOps. The session then extends an invitation to the audience to envision the future trajectories in CloudOps, facilitated by the collaborative force of AI LLMs and AWS, painting a canvas of possibilities that await in the realm of CloudOps diagnostics, from predictive maintenance to proactive solutions that pre-empt potential issues before they escalate, steering the CloudOps narrative towards a future of intelligence, efficiency, and automation.Attendees will not only gain a comprehensive understanding of the revolutionary potential of comingling AI LLMs and AWS in CloudOps but will walk away with a visionary perspective, equipped with the knowledge to spearhead innovative approaches in their respective CloudOps landscapes.

Mesut Durukal, Indeed, QA Automation Engineer

Yes, you got it right. We will talk about the user-friendliness of not the product we are developing, but our test automation framework. Well, the test automation framework is a product indeed, right? Let’s see ways to build a user-friendly test automation framework.
See the trailer: https://www.youtube.com/watch?v=nVj7ht4dQv4 

Laura Bell Main, SafeStack, CEO

Marius Zaharia, Société Générale, Cloud Solutions Architect

Behind the enthusiastic move of deploying and consuming public cloud resources hides a more delicate moment to come: when realizing that your assets may be vulnerable and open to bad intentions. This became a real concern, as more and more attacks are perpetuated against companies and institutions. As well, the same facility in consuming the public cloud brings particular risks of cloud resources governance.

This session will be on sharing experiences, processes, implementations of structured frameworks for controlling and governing public cloud resources to report compliance, protect against bad practices, or remediate con

Bobur Umurzokov, Datox.ai, Developer Advocate

The rise of real-time data processing has transformed business operations, yet navigating its technical challenges remains complex. Organizations often wrestle with managing distinct batch and streaming data workflows, each presenting unique difficulties. Batch processing, while effective for large datasets, can be costly, slow, and not well-suited for streaming API integration. On the other hand, streaming, despite its speed and low latency, often has restricted functionality.

This talk is prepared for developers, data engineers, and tech visionaries eager to explore how to build an efficient, dynamic, and unified data pipeline for both scenarios using streaming platforms in Python. You will see with examples how simple it is to make your batch code run in streaming with serverless infrastructure from day 1.

Simon Copsey, The Curious Coffee Club, Delivery & Transformation Consultant

Adopting and evolving technologies in an organisation is important and can offer significant advantages. However, translating these advantages into bottom-line benefits often comes from combining technical change with social change - we must not just change the technology, but also rewrite the rules governing how that technology is used.

We are seeing growing thought leadership moving into this sociotechnical space: SRE, Data Mesh, DevOps and Platform Engineering are equally about the technology as they are about the rethinking of how teams are designed and organised.

In this talk we hope to help you understand how to apply this sociotechnical thinking to your organisation, so you unlock the - often untapped - bottom-line benefits of technical change.

Marco Pierobon, Thoughtworks, Lead developer
Marisa Martín Serrano, Thoughtworks, Technical Product Manager

Many consultancy and product companies are trying to sell a model where developers can be ranked based on their output.
These measures are often times not only misleading, but also preventing effective collaborations.

Let's explore these faulty metrics and assess how productivity can actually be measured.

Ant(on) Weiss,  PerfectScale, Software Delivery Futurist

Platform engineering has become the de-facto standard implementation of the DevOps approach. Internal platforms are becoming the backbone of effective software delivery. But the discipline is still very young. The principles of platform design are still evolving.
One basic requirement is that an internal platform stays flexible and scalable - an enabling entity rather than a hurdle.
Let's review the industry's lessons on how to build platforms that scale.

Lena Thompson, Consulting

Resilience comes in different forms, and most are focused on developing physical and mental resilience to deal with life’s challenges and curveballs.

Although it is essential to develop these types of resilience, it may cause us to put an insurmountable amount of pressure on ourselves, leading to stress, anxiety and burnout.

But there is another type of resilience, and when we learn how to cultivate it, we can tap into our inner strengths without exerting so much effort and willpower.

In this presentation, I share how to cultivate this type of resilience and how it can help us overcome adversities and develop unshakable self-confidence.

The takeaways are:
-Strategy for generating more energy
-Practical tools to transform negative emotions into positive outcomes
-How to make great decisions
-Insights on self-empowerment techniques
- Cultivating inner peace and creating harmonious work environments

Niels Stubbe, Noest, Consultant and software architect

If you have worked in a legacy codebase or 'big ball of mud', you know that it can make development unnecessarily slow, frustrating and costly. The solution, many developers would say, is to just rewrite the whole thing. But good luck getting every stakeholder to agree to such a costly and risky process.

In this session we will take a look at the different ways you can clean up your codebase. while minimizing risk and costs. We will discuss some of the different strategies like the 'Strangler Fig Pattern' and we'll go over a few tips and best-practices on how you can avoid the same mistakes in the future.

Sydney Cohen, Axolo, CTO


This session talks about:

- Top 5 myths of measuring developer productivity with memes!
- Introducing the DORA metrics and the four key metrics with Benchmark
- Introduction to SPACE Framework, each concept, and how to implement it in your company
- Interactive Q&A session

Fabien Vauchelles, Scrapoxy, Anti-Ban Expert and Creator

Join me for a presentation where I share the mysteries of anti-bot systems, protected websites, APIs, and mobile applications ! 🌐📲

🛠️ What's in Store:

1/ Exploring the Defence Layers

Uncover the intricate layers of defence with TCP Fingerprint, TLS Fingerprint, HTTP/2 Fingerprint, and Browser Fingerprint. 🤯🔍

2/ Anti-Bot Reputation Score Demystified

Delve into the workings of the anti-bot reputation score, understanding how it operates across various layers to fortify websites. 🛡️💡

3/ Strategies for Evasion

Discover crafty strategies to navigate through these defences, unveiling techniques to outsmart detection mechanisms. 🕵️‍♂️💨

💼 Equip Yourself

After this talk, you'll emerge well-equipped with knowledge to navigate and comprehend the nuances of these protective measures! 🚀🔒

Don't miss this opportunity to gain insights into the fascinating world of anti-bot systems. 🌐🔓

Zoi Kaoudi, Scalytics, Co-founder & Head of AI
Alexander Alten, Scalytics, Co-founder & CEO

In this session and workshop, we'll dive deep into federated data processing, a technology which enables AI development that prioritizes data privacy and governance. No data movement means your sensitive information stays secure while you build powerful AI models using the computed output.

- Break down data silos: Analyze data at its source, eliminating the need for movement and potential privacy concerns.
- Simplify data access: Gain unified access to diverse data sources for streamlined AI development workflows.
- Enhance data governance: Implement robust access controls and data security measures for responsible AI practices.

Marin Niehues, NIehues Consulting, Consultant for Organisational & Product Development

In my professional career, I have experienced the development and implementation of agility at first hand in various organisations. In the process, I have increasingly observed that agility is an end in itself for many companies. But this should never happen under any circumstances.
Rather, it is a strategic tool, a means to an end, to ensure efficient and high-performance product delivery directly to the customer. Whilst agility is a clear way forward in certain contexts, it is not always the universal answer. This is where my talk comes in: It's about understanding that no customer buys internal agile processes; the customer invests in finished, high-quality products that meet their exact needs.

In my presentation, I will shed light on the actual role of agility, emphasise the importance of targeted application and show when exactly agility is preferable as a method. At the same time, I will discuss alternative frameworks that might be more suitable in other scenarios. With extensive experience in organisational development and process management, I combine deep insights into agile methods with a clear vision for effective product development. This talk will offer a critical but constructive exploration of agility, always focussing on how we as entrepreneurs, managers or developers can create the most value for our customers."

Vijaykumar Jangamashetti, Google, Cloud Architect

This session highlights the key capabilities of Google Cloud’s Generative AI's (GenAI) includes Vertex AI portfolio, including Vertex AI Model Garden, Vertex AI Platform, Vertex AI Search, and Vertex AI Conversation, previously use to be GenAI App Builder. It also introduces the recently launched Vertex AI Gen AI APIs and Vertex AI model garden. The session provides an overview of the different tools and services offered by the Vertex AI portfolio, how they can be used to build and deploy generative AI models, and how they can help businesses solve a variety of use cases. 

Harsh Joshi, Visa, Engineer

A deep dive into making products smarter and more user-friendly by incorporating generative AI. This session takes you through identifying prime opportunities for AI enhancement, navigating the technical landscape, and ensuring ethical considerations. Learn how to leverage high-quality data, select the most effective AI models for your needs, and continuously refine these models for peak performance. Plus, discover how to seamlessly blend AI into your product's user experience, making it not just more intelligent, but also more intuitive and engaging. 

Jason Tan, Engage AI, Founder & Managing Director

In this session, Jason will delve into the world of building Generative AI applications and the invaluable lessons learned along the way. Join Jason for a captivating session that unveils the framework behind crafting cutting-edge Generative AI solutions and the key takeaways that pave the path to success.

Jason will discuss:

- The foundational framework for developing a robust Generative AI application

- Invaluable insights gained from real-world experiences and challenges faced during the development process

- Lessons learned from overcoming obstacles and refining the application