Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Session 1: Build a smooth ci/cd pipeline using gitops and fluxv2. Working in a fast growing company raises a wide range of technical and organisational challenges.

Session 1: From attack to writing code...what do you need to know as a developer? We will look at a concrete attack called: "XML external entity attack (XXE)" and see how we can trace it back to writing code. The described mitigations are simple: configure your parser securely, but is it this simple? We will focus on some examples and see if we can catch the attack with tests, code reviews, etc. Nanne Baars, Developer at Xebia and OWASP WebGoat Project lead