Getting API Security Right
Explore best practices for securing APIs through real-world cases. Learn about attack surfaces, authorization issues, and actionable guidelines to enhance API security.
Sandboxing .NET Assemblies for Fun, Profit and of Course Security
Explore techniques for sandboxing .NET assemblies to enhance application security, limit third-party library risks, and create restricted environments for external modules using AssemblyLoadContext.
From App Security to Dev Security – Shift Left with GitHub Advanced Security
Discover how to integrate security seamlessly into your development workflow using GitHub Advanced Security, enhancing developer experience and reducing risks without compromising speed.
Crypto Means Cryptography!
Explore the evolution and importance of cryptography in securing digital transactions and private data, from online banking to social media accounts.
NOPASSWD - Building a Passwordless Cloud Infrastructure
Explore passwordless authentication for cloud infrastructure, covering FIDO2 standards, security risks, and implementation strategies. Learn to enhance security posture and select appropriate tools.
Developing and Deploying Containers and Microservices with Azure Container Apps
Simplify container deployment on Azure without Kubernetes complexity. Learn to set up, deploy, update, monitor, and secure containerized workloads using Azure Container Apps' serverless platform.
Preparing for Disaster - Handling the Election and MGP at NRK.no
Strategies for managing high-traffic events at NRK.no, including planned elections and Eurovision contests, as well as unexpected news surges. Lessons learned from past challenges and current preparedness measures.
Hostile JavaScript - Attacking and Defending the Browser
Explore JavaScript's potential for compromising users, consuming resources, and stealing data. Learn about attack vectors and defense strategies for securing web applications.
Defensive Coding Bootcamp
Learn essential security practices and defensive coding techniques to build more secure software across all programming languages.
The Curious Incident in Your Software in the Day-Time
Strategies for effective incident response in software development, covering planning, roles, communication, and post-incident actions to handle outages, bugs, and security breaches.
Defensive Coding Bootcamp
Learn essential security practices to build robust, hack-resistant software. Explore vulnerabilities, evasive coding techniques, and fundamental principles applicable across programming languages.
Why You Shouldn't Trust Me
Explore Zero-Knowledge Proofs: a revolutionary approach to information security that eliminates third-party trust, enhances privacy, and combines with web3 for unprecedented value creation.
Using WebAssembly to Run, Extend, and Secure Your .NET Application
Explore WebAssembly's evolution, security features, and integration with .NET. Learn to run and extend applications, leverage sandboxing, and utilize Trusted Execution Environments for enhanced security.
A Data Driven Approach to Application Security
Explore strategies for managing security alerts from multiple sources, aggregating data, and transforming information overload into actionable insights for both team and company-wide application security.
Google Family Link Field Test
Explore security vulnerabilities in Google Family Link and learn how teenagers can bypass restrictions using third-party apps. Discover mitigations to preserve digital wellbeing policies.
What the Log4j Incident Taught Us About Secure by Design
Exploring the Log4Shell vulnerability's impact on system design, this talk presents Secure by Design principles to mitigate similar threats and create more resilient applications.
Block DNS Exfiltration with Dnsmasq Proxy
Explore DNS exfiltration techniques and learn to mitigate threats using dnsmasq sidecar. Discover how hackers exploit DNS for data theft and implement effective countermeasures to enhance network security.
Security as Code - A DevSecOps Approach
Explore Security as Code methodology, integrating security into CI/CD pipelines for continuous vulnerability detection. Learn to implement CodeQL queries for early identification of security issues.
What is Linux Kernel Keystore and Why You Should Use It in Your Next Application
Explore Linux kernel keystore's secure credential management, data encryption, and key negotiation capabilities. Learn its benefits for cloud-native environments and integration with specialized security hardware.
How Hacking Works
Explore software exploitation, hacking techniques, and tools in this talk. Learn to secure systems through gamified environments and build skills for safer software development.
Test Driven Application Security
Explore test-driven application security with automated tests to validate defenses. Learn to prevent OWASP TOP 10 vulnerabilities through clear requirements and security-focused testing in C# and ASP.NET Core 6.