NDC Security Oslo 2019
who it's for
application developers, security engineers, cloud engineers, devops engineers, platform engineers, identity engineers, embedded device engineers
topics
Content Security Policy deployment; Reporting API and NEL; ASP.NET Core authentication; OpenID Connect with PKCE; token lifetimes and reference tokens; Azure Key Vault with HSMs; local key wrapping patterns; Istio mutual TLS and Envoy sidecars; Kubernetes init container iptables redirect; DevSecOps pipelines and Azure Policy; Chromium sandbox namespaces and seccomp; IoT relay and NFC attacks
| title | author | length |
|---|---|---|
| Hack to the Future | Troy Hunt | 01h 01m |
Demonstrates concrete failures and practical fixes: tapes and hard drives are lost on a truck, a breach of 186,000 records exposes plaintext and MD5 passwords… | ||
| Securing Web Applications and APIs with ASP.NET Core 2.2 and 3.0 | Dominick Baier | 01h 01m |
Covers ASP.NET Core security from cookie and data protection to API auth, showing that since 2.2 Microsoft includes IdentityServer4 in project templates and… | ||
| Crash, Burn, Report | Scott Helme | 01h 00m |
Browsers send out-of-band failure reports via the Reporting API by a simple response header like report-to header (JSON) with a cached max-age, so Chrome will… | ||
| Hacking a Cat — Going Beyond Traditional Attack Vectors | Niall Merrigan | 47m |
Shows concrete attack paths against implantable and nearby devices: captured AuraDev credentials using a Wi‑Fi Pineapple (credential capture), proposes… | ||
| Building Clients for OpenID Connect/OAuth 2-based Systems | Dominick Baier | 01h 02m |
Recommends using client credentials for server-to-server calls and code flow with PKCE for native and browser apps, citing OAuth 2 best practices and the… | ||
| Protecting Encryption Keys with Azure Key Vault | Stephen Haunts | 56m |
Shows how to set up Azure Key Vault backed by HSMs (nShield Connect) and code against it, with concrete costs like 3 cents per 10,000 ops and HSM keys billed… | ||
| Securing Kubernetes with Istio | Erlend Oftedal | 48m |
Istio deploys an Envoy sidecar proxy per pod (injected via kube-inject) and uses an init container with NET_ADMIN iptables redirection so app traffic… | ||
| Implement DevSecOps in Azure | Victoria Almazova | 54m |
Shows how to implement DevSecOps in Azure by partitioning subscriptions by environment and enforcing constraints at management groups so new subscriptions… | ||
| Linux Security APIs and the Chromium Sandbox | Patricia Aas | 55m |
Chromium’s multiprocess layout is mapped to concrete Linux primitives: the browser forks/clones child processes and uses clone + user/pid/net namespaces to… | ||
| DevSecOps for Developers: How To Start | Patricia Aas | 01h 02m |
Claims that building security into DevOps improves both delivery and security (citation: Accelerate) and gives pragmatic steps for a lone security person… | ||
| nothing matches | ||