Opis zdarzenia

The link to the "Live hacking: Breaking into your Java web app (Brian Vermeer)" talk:

Live hacking: Breaking into your Java web app (Brian Vermeer) In this session, we will demonstrate how common vulnerabilities in the Java eco-system are exploited on a daily base by live hacking real-world application libraries. All the examples used are commonly known exploits, some more famous than others, such as Apache Struts and Spring break remote code execution vulnerabilities. By exploiting them and showing you how you can be attacked, before showing you how to protect yourself, you will have a better understanding of why and how security focus and DevSecOps is essential for every developer.

Demystifying Certificates and TLS For Java Developers (Alan Scherger) What exactly is an SSL Certificate? Do rolling out tools with mTLS enabled seem impossible? Can you test that your infrastructure tools properly uphold the security claims they make regarding mTLS? Does the thought of rotating the certificate authority your service mesh rely on scare you? In this talk, we will begin our journey looking at the RFCs behind these technologies. Next, we will use OpenSSL, CFSSL, and mkcert to validate what we have learned about X509 v3 certificates. We will then bootstrap Consul to quickly demonstrate server, client, and browser usages of certificates. After that, we’ll do a deep-dive into how Kafka uses certificates to secure its brokers and clients, and possibly (KIP-515) its connections to Zookeeper.


Brian is Developer Advocate for Snyk and Software Engineer with over 10 years of hands-on experience in creating and maintaining software. He is passionate about Java, (Pure) Functional Programming and Cybersecurity. He is a regular conference speaker on events like JFall, JBCNConf, Oracle Code, Devoxx, JavaZone, JFokus and JavaOne. Besides being an engineer he is a Reservist at the Royal Netherlands Air Force and a Taekwondo Master.

Alan is an operations-focused developer. He has experience running and developing with the Netflix stack, starting with Asgard. Now, of course, he studies, manages, and sometimes even contributes to tools such as Mesos, Kubernetes, Nomad, and Spinnaker. When he is not starring into pixels, he can be found picking-up and putting-down heavy things at a strength training gym, or unoriginally exploring coffee shops and boardgames whenever friends are free.

Pokaż pełne informacje pokaż mniej informacji

Kto idzie?

All visitors
Z Lviv
Aby zobaczyć znajomych na zdarzeniu, zaloguj się za pośrednictwem Facebooka

Moje spotkania

Pobierz aplikację mobilną 2Event

Dla organizatorów i gości wydarzenia:
  • Wydarzenia i bilety online
  • Poznaj uczestników wydarzenia
  • Bierz udział w wydarzeniach, którymi interesują się Twoi znajomi
  • Wspólna podróż! Kup bilet grupowy na pociąg lub samolot, albo zaplanuj wspólną podróż autem.

Informatsiya pro organizator



Wyświetl stronę

wydarzenia organizatora

Powiązane zdarzenia

Share event

Or send an invitation to your friends.

Send invitation
Meeting place:
  • Tables
  • Tables
  • Tables
  • Tables
  • Tables
  • Tables
  • Tables

Subskrybuj działania i ogłoszenia

Miasto, które mnie interesuje

  • Warsaw
  • Krakow
  • Lodz
  • Poznan
  • Wroclaw
  • Warsaw
  • Krakow
  • Lodz
  • Poznan
  • Wroclaw


Aleksandra Mironova
Hey. Do you want to go with me to the speech of Architects?
Hey. Yes of course. This is my favorite band. just tell me a little about yourself first
ok)) give me a minute...
Aleksandra is typing . . .
У вас вже є квиток на цю подію?

Перед тим як створити план поїздки та переглядати доступний транспорт, будь ласка, придбайте квиток на подію

Я буду на цій події Купити квиток
Zaloguj się
Nowy użytkownik? Zarejestruj się
Zarejestruj się
Jeśli masz już konto w 2Event - zaloguj się. Zaloguj się
Zresetuj hasło
Create password
Funkcja przyszłości
Ta funkcja pojawi się wkrótce.
Na Głowną
Ви успішно підписались на анонси та знижки від 2event. Приєднуйтесь до нас і в соц. мережах
Wrong email
Na Głowną
Wybierz miasto
Wybierz kraj
Add to Gallery