Using WebAssembly to Run, Extend, and Secure Your .NET Application
Explore WebAssembly's evolution, security features, and integration with .NET. Learn to run and extend applications, leverage sandboxing, and utilize Trusted Execution Environments for enhanced security.
A Data Driven Approach to Application Security
Explore strategies for managing security alerts from multiple sources, aggregating data, and transforming information overload into actionable insights for both team and company-wide application security.
What the Log4j Incident Taught Us About Secure by Design
Exploring the Log4Shell vulnerability's impact on system design, this talk presents Secure by Design principles to mitigate similar threats and create more resilient applications.
Security as Code - A DevSecOps Approach
Explore Security as Code methodology, integrating security into CI/CD pipelines for continuous vulnerability detection. Learn to implement CodeQL queries for early identification of security issues.
Running System Tests with Active Authn/Z
Explore strategies for efficient system testing with active authentication and authorization, addressing common challenges and presenting a potential solution for development teams.
Test Driven Application Security
Explore test-driven application security with automated tests to validate defenses. Learn to prevent OWASP TOP 10 vulnerabilities through clear requirements and security-focused testing in C# and ASP.NET Core 6.
What I Learnt About Automating Security
Explore automation strategies for comprehensive cybersecurity, covering infrastructure, threat protection, cloud security, and proactive measures to address the growing skills gap in the industry.
What Happens if I Change This URI - Oooooh
Explore broken access control vulnerabilities, their impact, prevention methods, and efficient testing techniques in web applications.
How to Review Code for Security Issues
Learn to identify and prevent common security vulnerabilities during code reviews. Discover eight essential questions to ask and practice spotting issues in a real pull request example.
Lost and Found in Translation - An Intro to ML Assisted Decompilation and Deobfuscation
Explore ML-assisted decompilation and deobfuscation, covering large language models, neural machine translation, and their applications in reverse engineering and security auditing.
NOPASSWD - Building a Passwordless Cloud Infrastructure
Explore passwordless infrastructure for enhanced security. Learn FIDO standards, design options, and implementation strategies. Discover how to improve your team's security posture regardless of size.
OAuth and the Long Way to Proof of Possession
Explore the evolution of OAuth 2.0's proof of possession, from its omission to current implementation methods. Learn about sender constraining and its importance in modern security practices.
The Insecurity of OAuth 2.0 in Frontends
Explore XSS threats in OAuth 2.0 frontends, assess real-world attacker capabilities, and learn effective defense strategies for securing your applications against advanced attacks.
Coding in the Cloud with GitHub Codespaces
Explore GitHub Codespaces: a cloud-based development environment. Learn setup, features, and productivity tips for coding on-the-go or at your desk, enhancing your workflow efficiency.
You Shall Not Password - Modern Authentication for Web Apps
Explore modern web authentication methods beyond passwords, including SSO, 2FA, OAuth, and more. Learn their benefits, limitations, and how to enhance user security in web applications.
OAuth and Proof of Possession - The Long Way Round
Explore OAuth's evolution, focusing on proof of possession mechanisms, token binding, and mutual TLS. Learn about industry developments and practical implementations for enhanced security.
Frontend Architectures - The Next Generations
Explore emerging frontend architectures, tools, and patterns like Qwik, Astro, Edge Functions, and Solid.js. Gain insights into their technical workings and practical applications for modern web development.
Building a Dedicated Platform for Frontend Developers at NAV
Exploring NAV's innovative platform for frontend developers, addressing unique challenges of single-page applications and enhancing productivity with tailored tools and services.
Riding the Wave of Complexity
Explore strategies for navigating complexity in software development, including proactive approaches, feedback loops, and incremental steps to foster innovation and tackle legacy code challenges.
Azure Static Web Apps for the Enterprise
Explore enterprise-level Azure Static Web Apps: infrastructure as code, custom pipelines, multi-environment deployments, and Auth0 integration for robust authentication and authorization.
The Metaverse - Beyond the Buzzword
Explore the Metaverse's practical applications in Azure, focusing on industrial solutions, IoT integration, and physical environment interactions. Learn about key technologies and development challenges.