Sven Ruppert
where else to find them
website:http://svenruppert.com
github:svenruppert
mastodon:@svenruppert@mastodon.social
linkedin:svenruppert
speakerdeck:svenruppert
devto:svenruppert
what they talk about
all 8 in the filters
where they keep going back
no series more than once — all 12 in the filters
on a stage with
- Abby Bangseronce
- Ala Shibanonce
- Alain Lompoonce
all 51 in the filters
who talks about the same things
- Yash Pimple4 talks
- Jillian Ratliff3 talks
- Brian Fox10 talks
- Steve Poole41 talks
- Michael Lieberman36 talks
- Adrian Diglio4 talks
| title | conference | date |
|---|---|---|
| Strengthening Java Apps: Best Practices in Secure Coding for Java Developers | JCON EUROPE 2025 | 2025-05-12 |
Covers concrete risks and defenses: shows how dependency confusion and typosquatting let external jars slip into Maven builds (CI, Jenkins, Docker, SBOMs)… | ||
| Premiere | Conf42 Cloud Native 2023 | 2023-03-30 |
A compiled session list that names concrete claims and tech: comparisons of OpenStack Magnum versus the Cluster API, Gateway API replacing Ingress, Azure… | ||
| Supply Chain Security for OpenSource Projects | Conf42 Cloud Native 2023 | 2023-03-30 |
Shows concrete controls: adopt SLSA levels and build-info to produce SBOMs, centralize binaries in Artifactory and scan metadata with X‑Ray, and shift left… | ||
| Supply Chain Security for OpenSource Projects | Voxxed Days Cluj-Napoca 2022 | 2022-10-05 |
SolarWinds Hack shows CI compromise that injects malicious code into builds and infects an estimated 12–15k customers, so focus on concrete steps: start with… | ||
| The SolarWinds Hack and the Executive Order on Cybersecurity happened | ContainerDays 2022 | 2022-09-05 |
Explains that the SolarWinds backdoor is an example of CI-corrupted builds and argues software supply chain defense focuses on traceability and hardening three… | ||
| The Quick Wins of DevSecOps | Java Day Istanbul 2022 | 2022-05-27 |
SolarWinds infects ~300,000 customers and compromises ~15–20k networks, so focus shifts from source-only checks to supply-chain hygiene: prioritize scanning… | ||
| The Quick Wins of DevSecOps | JCON-ONLINE 2021 | 2021-10-05 |
Practical guidance on easy, high-impact steps to integrate security into software development (DevSecOps), aimed at developers and teams seeking quick wins and… | ||
| How the SRE fits into the DevSecOps World? | JCON-ONLINE 2021 | 2021-10-05 |
Explains the relationship and differences between DevOps and Site Reliability Engineering (SRE), describing how both aim to bridge development and operations… | ||
| Using WebComponents with Java on the Server Side to harden the stack | Devnexus 2021 | 2021-02-17 |
Shows how to instantiate client-side SAP ui5-webcomponents from Java by using Vaadin annotations (npm-package, js-module, tag) to generate server-side classes… | ||
| Hidden pearls for high-performance-persistence in Java | Joker 2020 | 2020-11-25 |
Quick survey of concrete options and claims: jOOQ, Speedment and JPA streams keep SQL as the single source and require tuned queries; Chronicle Bytes and… | ||
| Hidden Pearls for Java Embedded High-Performance Persistence | Developer Summit 2020 | 2020-11-21 |
Compares two embedded Java persistence options: MapDB 3.0.8 and MicroStream. MapDB provides drop‑in transactional maps/lists/queues with on‑ and off‑heap… | ||
| DevSecOps - Why Debian repositories are Mission-Critical! | Developer Summit 2020 | 2020-11-21 |
Debian repositories become a single point of control by caching external mirrors inside Artifactory + X‑Ray so systems keep exact package versions, get faster… | ||
| DevSecOps - Security from Scratch | Developer Summit 2020 | 2020-11-21 |
Argues that the fastest risk reduction is scanning dependencies from the IDE to the registry to the image and gives concrete tooling: JFrog Xray + Artifactory… | ||
| Use server-side WebComponents with Java & harden the stack against Vulnerabilities | JCON 2020 | 2020-10-27 |
Shows how to wrap SAP UI5 web components as server-side Java classes by using Vaadin Flow’s abstraction: annotate with @NpmPackage and @JsModule, declare the… | ||
| Practical DevSecOps for private and open source projects | JCON 2020 | 2020-10-27 |
Practical plan: prioritize scanning dependencies across source, binaries and containers because they represent the largest attack surface and are the fastest… | ||
| Polyglot apps lead to Polyglot security holes. Time to fight back! | JCON 2020 | 2020-10-27 |
Shows that mapping client WebComponents to server-side Java via Vaadin Flow and a custom UI5-to-Java repo (Apache license) adds hidden npm/javascript surfaces… | ||
| DI Frameworks – some hidden pearls | Voxxed Days Bucharest 2016 | 2016-03-11 |
Compares CDI, Spring, Dagger, HK2 and BonDI with concrete tests: finds BonDI bug: producer ordering is random (ConcurrentHashMap key order causes surprising… | ||
| From jUnit to Mutation-Testing | Jfokus 2016 | 2016-02-08 |
Claims that line coverage lies and mutation testing shows what tests actually exercise code paths, using JUnit as the test harness and Pitest (via Maven) to… | ||
| nothing matches | ||