Faglig Fredag den 16. december 2022 – Serverless vs. Containere, Unicode exploits and Cross-Site Request Forgery Attacks og Scale your tech team faster

Vi glæder os til en dag med spændende oplæg og gode snakke. Tilmeld dig allerede i dag, så sørger vi for en god plads.

Lokation: Fysisk – IDA Conference – Kalvebod Brygge 31-33, 1560 København.
Lokation: Streaming – du modtager deltagerlink i mail.

Program

Containers har været i spil i ca 10 år, og har erobret tronen for deployment og runtime. Containernes styrke ligger i, at det er nemt for udviklerne at arbejde med. Vi har set det igen og igen. Hvis en teknologi skal vinde indpas, skal det være nemt og forståeligt for udviklerne. Se bare Soap vs Rest. Eller JMS vs RabbitMq …
Serverless har mange fordele. Man skal bare skrive kode. Ingen Operations, Ingen upfront costs. Pay-as-you-go. Uendelig friktionsløs skalering.
I oplægget taler Christian om nogle af de overvejelser, man som organisation skal gøre sig. Et par demoer har også sneget sig ind, og illustrerer, hvordan Serverless og Containers rent faktisk virker.

Christian von Wendt Jensen – Seniorkonsulent | Instruktør

Hands-on Arkitekt og Developer med ekspertviden i AWS Cloud teknologier: Terraform, DevOps, Arkitektur, Serverless, og Security. Speciale i Java, Spring/SpringBoot. Stor erfaring med Docker, herunder Swarm og Kubernetes. Underviser i Java, SpringBoot og Maven. Arbejder godt sammen med forretningen og udviklerteamet, og kan balancere kvalitet med time-to-market.

Earlier this year, I presented fighting XSS attacks using content security policy, one of the most common security exploits. Today, I will be talking about two more common exploits in modern web application security: Unicode exploits and Cross-Site Request Forgery (CSRF) attacks. You will also learn some common methods for fighting these attacks and keeping your data and your client’s data safe from harm.

Here is a sneak peek at what I will present:

• Unicode and encoding
  At the lowest level, we have characters, Unicode, and encoding that most of the web is built upon. In this part, you will learn the fundamental concepts involving Unicode and encoding and why emojis and other characters can cause trouble for us in our applications.

• Cross-Site Request Forgery (CSRF) attacks and prevention
  This is a common attack against our web applications that involve hackers tricking innocent end users into making requests to websites and applications that they’re logged into. In this talk, you will learn how this attack is carried out and what you can do to protect yourself against it.

After this talk, you will be more aware of common web security concepts, how Unicode and encoding exploits, as well as CSRF attacks, are executed, and how to protect yourself and your users better. By studying these ideas, you can help make the internet a little more secure.

Tore Nestenius – Seniorkonsulent | Instruktør

Tore is an independent software consultant and trainer based in Helsingborg, Sweden. For the last 10 years, he has trained developers worldwide in software architecture, web security, OpenID-connect, C#/.NET, and domain-driven design. When he is not teaching, he is mentoring and coaching developer teams all around Europe. He is currently working on courses in secure development and web security that will be released through Lund&Bendsen in the coming months.

You are a success. The systems your team develops are essential to the business. They keep wanting more, and you have so much more to offer. New features, more data, more platforms.
But this leads you to new challenges. Finding great employees is not easy. This is especially true if you are looking for senior candidates. Many recruiters will provide you with profiles that match too few of your requirements. And internally, your growing team will find it increasingly difficult to distribute tasks, and they are too often blocked, waiting for someone else. Some team members become bottlenecks by being essential to too many tasks.
This talk will inspire you to
– Level up your game when it comes to recruiting techies. Hire better than your competition.
– Organize a growing number of techies into separate teams in a way that avoids complexity and keeps everyone productive.

Niels Christensen – Seniorkonsulent

Niels “Elfin” Christensen is an advisor, consultant and mentor specialising in leadership and excellence for software organisations. He has Ph.D. in computer science and has been working with software and management for 25 years.

Tak for i dag!