~/talks

Laura Bell

what they talk about

all 5 in the filters

where they keep going back

all 7 in the filters

on a stage with

never shared a talk

who talks about the same things

titleconferencedate
So Long Secure Coding - Practical Steps for Securing the entire SDLCNDC London 20252025-01-27
Covers practical SDLC steps: map every system and annotate where data and controls live, run simple threat models (use OWASP Threat Dragon) and treat…
Talk on
Using developer-centric data to predict, prioritize, and improve App Security OutcomesNDC Security 20252025-01-20
Uses developer tool metadata (GitHub APIs, build and PR logs) to profile projects by build frequency, PR size and reviewer diversity, lines of code, tech…
Talk on
Team of 30 million: Reducing Software Vulnerability at a Global ScaleOWASP 2022 Global AppSec Europe Virtual Event2022-11-04
Claims a global patchwork of 30 million developers exists with ~1.2M added yearly and only ~2% on bleeding‑edge toolchains, and argues five concrete measures…
Talk on
So long secure coding... Hello secure development!NDC Sydney 20222022-10-12
Argues that code alone is not enough and gives concrete steps: draw a system design and run a threat model (use the Threat Modeling Cookbook, ThreatDragon or…
Talk on
Bigger, Faster and More SecureNDC Minnesota 20182018-05-07
OWASP Top Ten problems persist since 2004 and a pen test finding shows 40% of bugs come from original founders, so the talk argues change is overdue: replace…
Talk on
Continuous SecurityNDC Sydney 20172017-08-14
Argues concrete steps to make security part of the pipeline: use STRIDE threat modeling and security personas to drive stories, run OWASP ZAP (headless) or…
Talk on
Tales of a Unicorn Herder - Security in Startups and Disruptive TeamsNDC Sydney 20172017-08-14
So your team is part of a highly innovative, totally disruptive company/organisation/team/university department/cult and you're going to conquer the world?…
Talk on
DIY Security for the Amateur SuperheroNDC Sydney 20162016-08-01
Engineers get concrete tactics: run the OASP dependency checker or track packages with libraries.io to avoid “left‑pad” style supply‑chain worms (one six‑line…
Talk on
Practical Microservice SecurityNDC Sydney 20162016-08-01
Covers concrete risks and fixes for real microservice setups: token/JWT misuse and a base64 pitfall, fragmented auth across legacy services, and how…
Talk on
Practical Microservice SecurityGOTO Chicago 20162016-05-23
Covers concrete failures and fixes for service-based systems, showing that prevention alone fails and detection is essential: recommends centralized logging…
Talk on
Securing Organizations Through Bad BehaviorVelocity Santa Clara 20152015-05-27
Organizations face mostly simple, opportunistic attacks that target passwords, misconfigured internet-facing systems, and human helpers rather than exotic zero…
Talk on
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.