Tobias Ahnoff
where else to find them
what they talk about
all 5 in the filters
where they keep going back
- NDC Security4 editions2023–2026
- Jfokus3 editions2021–2025
on a stage with
all 5 in the filters
who talks about the same things
- Martin Altenstedt3 talks
- Philippe De Ryck39 talks
- Brock Allen11 talks
- Dominick Baier31 talks
- Ben Dechrai29 talks
- Anders Abel14 talks
| title | conference | date |
|---|---|---|
| Secure and Compliant APIs - By Design | NDC Security 2026 | 2026-03-02 |
Adds a missing market-level authorization check to a .NET products API, proves the bug with unit and system tests, and then automates detection by feeding a… | ||
| Test Driven Application Security | Jfokus 2025 | 2025-02-03 |
Demonstration uses Java 21 with Spring and Spring Security and automated tests in JUnit 5 with AssertJ to turn common OWASP Top 10 failures into reproducible… | ||
| Secure System Integrations | NDC Security 2025 | 2025-01-20 |
Recommends a concrete baseline: enforce network segmentation, use TLS 1.3 only (or a hardened 1.2) and verify with SSL Labs scanning, and move client auth from… | ||
| OAuth2/OIDC security weaknesses and pitfalls | NDC Security 2024 | 2024-01-09 |
Shows live demos using Burp Suite, IdentityServer and Keycloak: a cross‑site scripting exploit loads attacker JavaScript that creates a silent renew iframe to… | ||
| Test Driven Application Security | NDC Security 2023 | 2023-01-16 |
Demonstrates a test-driven approach that turns OWASP Top 10 failure modes into automated checks: system tests (liveness/readiness, TLS 1.3, security headers… | ||
| Implement defence in depth for your Java API:s | Jfokus 2022 | 2022-05-02 |
The development of REST API:s and applications that expose sensitive data over the internet can be challenging for us developers. Based on experiences from… | ||
| Defence in depth as Code | NDC Oslo 2021 | 2021-11-29 |
Slides and live demo show a practical six-step model implemented in ASP.NET Core 6: HTTPS hosting plus reverse proxy, JWT validation with Duende… | ||
| Defence in depth | Jfokus 2021 | 2021-02-09 |
Concrete checklist for securing REST APIs: draw a map of all clients, users, audiences and scopes including forgotten machine-to-machine integrations… | ||
| nothing matches | ||