Expect the Unexpected - How to Choose Reliable Open Source Dependencies
Learn best practices for selecting reliable open source dependencies, drawing parallels with choosing event vendors. Gain insights on setting up a robust ecosystem to withstand unexpected challenges in software development.
Passwords Are So 1990
Explore modern authentication methods beyond passwords, enhancing security and user experience in digital systems.
Trojan Source - Bad Characters Are Coming for Your Code
Explore invisible vulnerabilities in source code through encoding attacks, their impact on various systems, and practical defenses against this emerging threat vector.
Operate Kubernetes Workloads - Extend the Platform with the Operator Pattern
Explore the operator pattern for managing Kubernetes workloads efficiently. Learn how software-based operators can automate installation, upgrades, and maintenance, reducing human intervention in cloud-native environments.
Mother Nature vs Java - The Security Face Off
Explore biological analogies for application security, drawing inspiration from nature's defense mechanisms to enhance Java software protection and development processes.
Docker Security for Developers
Practical guide for developers on Docker security best practices, covering strong defaults, official images, least privilege, and microservices to enhance application security.
Rust as a Support Language
Explore Rust as a safe, high-performance alternative to C/C++ for low-level development. Learn techniques for integrating Rust into existing projects and leveraging its benefits.
The Hacker's Guide to JWT Security
Comprehensive guide to JWT security risks, vulnerabilities, and best practices. Live demos showcase account hijacking techniques, while offering solutions for robust authentication implementation.
Modern Identity Management in the Era of Serverless and Microservices
Explore comprehensive identity management beyond authentication, covering provisioning, governance, and federation. Learn about passwordless login, multifactor authentication, and PaaS solutions for improved user experience.
How I Used to Rob Banks
Ethical hacker shares thrilling tales of bank heists, revealing security flaws through lockpicking, social engineering, and digital exploits. Learn valuable lessons on improving organizational defenses.
Lightweight Enterprise Java with MicroProfile
Discover how MicroProfile optimizes Enterprise Java for microservices, enabling lightweight, portable applications that can run anywhere, even on a Raspberry Pi. Learn to develop efficient, scalable solutions.
A Secure Journey on Kubernetes
Explore Kubernetes security layers, from infrastructure to application runtime. Learn to analyze, scan, and mitigate vulnerabilities for a more secure containerized environment.
How to Get Properly Hacked
Live-coding session exploring common software development mistakes that lead to security vulnerabilities. Discover how to identify and prevent these issues to enhance application security.
Excellent Ways to Secure Your Spring Boot Application
Learn essential techniques to secure Spring Boot applications, including HTTPS, dependency scanning, CSRF protection, CSP implementation, OIDC authentication, and password hashing.
Protecting Your Organisation Against Attacks via the Build System
Explore build system security risks and mitigation strategies, including dependency verification, checksums, vulnerability detection, and build reproducibility. Learn to safeguard your development process.
Why We Hate Java Serialization and What We're Doing About It
Explores Java Serialization's flaws, security risks, and obsolescence. Analyzes design issues, presents examples of resulting bugs, and discusses potential replacements that integrate better with the language model and enhance code clarity.
Finding Security Vulnerabilities Before They Find You
Explore live hacking techniques to identify and exploit vulnerabilities in open-source dependencies, with practical demonstrations and solutions for securing your applications.
The Survival Guide to Modern Apps AuthN and AuthZ Specs
Comprehensive overview of modern authentication and authorization standards for applications and APIs, covering SSO, token-based security, OAuth2, FIDO, and more.
Secure Your Quarkus Applications
Explore options for securing Quarkus applications through live coding. Learn to implement crucial security and identity management features with ease and efficiency.
Make Your IoT Even Smarter with TensorFlow Lite to Design the Future of Vertical Farming
Deploying TensorFlow Lite on IoT devices for smart vertical farming: optimizing plant growth, reducing latency, enhancing privacy, and enabling offline operation in areas with unreliable internet.
Stranger Danger - Finding Security Vulnerabilities Before They Find You
Discover techniques to identify and mitigate security vulnerabilities in open-source NPM modules, using real-world examples and practical demonstrations to enhance your application's safety.