Secure APIs From Your DevOps Pipeline with Swagger/OpenAPI
QSC USA 2020 – Dave Ferguson, Director of Product Management, WAS, Qualys
The early days of RESTful APIs were like the Wild West, as APIs were not built with security in mind. Developers had no standard to describe APIs to consumers and documentation was done manually in an ad-hoc fashion. Eventually, a specification known as Swagger - now called OpenAPI – came onto the scene. Swagger/OpenAPI not only provides a standard way to describe an API, but it also offers an opportunity to harden it against attack. In this session, you will learn how APIs can be developed securely by leveraging the Swagger/OpenAPI specification.