NDC Conferences Courses

HelseID

Etablering av nasjonal tillitstjeneste i norsk helsesektor: HelseID. Utfordringer ved implementering av OAuth2 og OpenID Connect i konservativ bransje med legacy-systemer. Eksempler på løsninger for både eldre og moderne applikasjoner.

• YouTube
• 1 hour 3 minutes
• On-Demand
• Conference Talk

Minimum Viable Security

Simplifying microservices security through automation and design principles. Learn to build a secure cluster, monitor networking, manage containers, and implement least privilege access for robust, scalable security.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Breaking AES with Side Channel Analysis

Explore side channel analysis attacks on AES encryption, including power consumption analysis and key extraction techniques, with a live demonstration on an embedded CPU.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

Demonstrating Binary Exploitation

Explore binary exploitation through live demonstrations, including a Sudo vulnerability exploit. Learn detection and prevention techniques for memory corruption vulnerabilities in software.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Vulnerabilities that Hide from Your Tools

Explore methodologies for uncovering hidden vulnerabilities that automated tools miss, enhancing application security beyond reliance on automation.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Measuring DevSecOps

Explore key DevSecOps metrics, from theory to practice. Learn to identify, track, and visualize essential security KPIs for your team's success and continuous improvement in the DevOps world.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Sandboxing a Linux Application

Explore Linux application sandboxing techniques, including namespaces, file systems, and Seccomp, to isolate and secure your applications while gaining insights into Docker's implementation.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Conference Talk

Common Python Coding Mistakes

Explore common Python coding mistakes leading to vulnerabilities, their consequences, and prevention strategies. Learn to bridge the communication gap between development and security teams.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

It Doesn't Take Much to Be Above Average

Insights on common security shortcomings in small software companies and cost-effective strategies to address them, based on analysis of hundreds of businesses.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Opening The Playbook - What to Do When You've Been Hacked

Learn from Evernote's 2012 data breach experience: prevention strategies, immediate response actions, and long-term recovery steps for safeguarding your company's valuable data against cyber threats.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

Why We Should Kill Saml2

Explores SAML2's flaws and argues for OpenID Connect as a superior single sign-on protocol, examining top challenges and demonstrating vulnerabilities in implementations.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Security Control Enhancements

Explore Java's latest security enhancements, including SHA-3 support, deserialization security, improved TLS, and key management. Learn about API changes and new defenses in Java 9-17 platforms.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

Protect Your Code with GitHub Security Features

Learn to secure your software using GitHub's features, including signed commits, dependency scanning, secret scanning, and CodeQL, to protect against various attack vectors in modern development.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

Hyper Speed - When Big Data Blooms

Explore high-speed data processing techniques, including Bloom Filters, to handle massive volumes of telemetry data efficiently. Learn infrastructure strategies for processing 65,000 JSON payloads per second.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

AppSec is Too Hard

Explore common AppSec challenges, framework limitations, and practical solutions for building more secure applications at scale. Learn robust patterns to enhance your security practices.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk