Niels Tanis
where else to find them
what they talk about
all 5 in the filters
where they keep going back
- NDC Oslo4 editions2020–2025
- NDC Security3 editions2023–2025
- NDC Porto2 editions2022–2023
all 11 in the filters
on a stage with
never shared a talk
who talks about the same things
- Tom van den Berg5 talks
- Ashish Bijlani8 talks
- Victoria Almazova19 talks
- Steve Poole41 talks
- Michael Lieberman36 talks
- Jim Manico28 talks
| title | conference | date |
|---|---|---|
| Building Community-Driven Security Analysis for Your .NET Software Supply Chain | NDC Manchester 2025 | 2025-12-01 |
Explains concrete tools and results: an open-source CLI called Fennec Labs that runs OSS Scorecards on solution dependencies, flags transitive CVEs (now… | ||
| Using GenAI on and inside your code, what could possibly go wrong? | NDC Copenhagen 2025 | 2025-09-08 |
Academic benchmarks find roughly 40% of generated apps contain vulnerabilities; a Veracode-style dataset shows ~71% of orgs carry year‑old security debt and… | ||
| Using GenAI on and inside your code, what could possibly go wrong? | NDC Oslo 2025 | 2025-05-19 |
Academic studies find concrete failure rates: a 2021 Copilot analysis of ~1,700 generated apps shows 41% vulnerable and a later study of ~400 apps finds 36%… | ||
| Using GenAI on your code, what could possibly go wrong? | NDC Security 2025 | 2025-01-20 |
Academic benchmarks find roughly 40% of generated snippets contain vulnerabilities (2021–2023 studies) and code velocity rises as developers accept LLM output… | ||
| Reviewing NuGet Packages security easily using OpenSSF Scorecard | CPH DevFest 2024 | 2024-08-26 |
About 80% of an app is third‑party code and Scorecard gives a fast, evidence‑based lens: OpenSSF Scorecard runs ~30 checks (vulns, branch protection, CI… | ||
| Assessing 3rd Party Libraries More Easily With Security Scorecards | Global AppSec Lisbon 2024 | 2024-06-24 |
Claim: automated security scorecards let teams quantify library risk quickly. Uses OpenSSF Scorecard checks, the scorecard CLI and public viewers plus… | ||
| Reviewing NuGet Packages security easily using OpenSSF Scorecard | NDC Oslo 2024 | 2024-06-10 |
OpenSSF Scorecard runs automated checks and produces a 0–10 aggregate score with weighted risks; OpenSSF Scorecard gives 0–10 aggregate score. The demo shows… | ||
| Assessing NuGet Packages more easily with Security Scorecards | NDC Security 2024 | 2024-01-09 |
OpenSSF Scorecards runs automated checks and rates projects 0–10 so maintainability and build risks become measurable; the CLI and dev.dev API already embed… | ||
| Using WebAssembly to run, extend, and secure your .NET application | NDC Porto 2023 | 2023-10-16 |
Demonstrates compiling a .NET CLR into a single ~8.5 MB .wasm bundle and running it outside the browser using WASI + Wasmtime host, loading a Rust-compiled… | ||
| Using WebAssembly to run, extend, and secure your .NET application | NDC Security 2023 | 2023-01-16 |
Shows how .NET runs inside browser and servers by compiling runtimes to WASM and using WASI: Blazor downloads DLLs and a .NET WASM CLR, server-side uses… | ||
| Securing your .NET application software supply-chain | NDC Sydney 2022 | 2022-10-12 |
Explains concrete defenses: shows SolarWinds and CodeCov as real failures, demonstrates making .NET builds deterministic (difference came from PDB paths, fixed… | ||
| Sandboxing .NET assemblies for fun, profit and of course security! | NDC Porto 2022 | 2022-04-25 |
Shows a concrete method to limit a NuGet library without changing its source by loading it into a separate folder via AssemblyLoadContext, publishing it… | ||
| Securing your .NET application software supply chain | NDC Oslo 2021 | 2021-11-29 |
Shows concrete fixes: a binary diff demo finds non-reproducible DLLs caused by PDB paths and resolves them by embedding symbols and using dotnet-reproducible /… | ||
| The Rise of Software Supply-Chain Attacks – How Secure is your .NET Application? | NDC London 2021 | 2021-01-25 |
A .NET application supply chain walkthrough shows where attacks actually occur: compromised IDEs and extensions, CI/CD build scripts (a VS Code build variable… | ||
| The Rise of Software Supply-Chain Attacks – How Secure is your .NET Application? | NDC Sydney 2020 | 2020-08-31 |
Shows concrete supply‑chain failures (npm event-stream, XcodeGhost, Twilio SDK, stolen git credentials and a 500 GB Microsoft leak) and demonstrates tools that… | ||
| Reducing Third-Party Security Risk in .NET Core Applications | NDC Oslo 2020 | 2020-06-08 |
Shows a demo MVC app where an included PDF component allows path traversal and server‑side request forgery (loads remote images). Uses .NET Core 3.1… | ||
| Reducing Third-Party Security Risk in .NET Core Applications | NDC London 2020 | 2020-01-27 |
Scans a real .NET Core app and finds a widely used PDF library that pulls images by URL, exposing server‑side request and file disclosure risks; shows a live… | ||
| Reducing Third-Party Security Risk in .NET Core Applications | Update Conference Prague 2019 | 2019-11-14 |
Demo MVC app has two concrete bugs: dynamic filename creation allowing path traversal and image URLs causing server‑side request forgery by fetching remote… | ||
| Building Secure ASP.NET Core MVC Applications | AppSec USA 2017 | 2017-09-19 |
Shows that ASP.NET Core MVC defaults reduce common mistakes but require explicit fixes: controllers are convention‑discovered, model binding enables… | ||
| nothing matches | ||