Name: NDC Security 2023
Start: 2023-01-16
End: 2023-01-19
Location: NDC Security

Anders is a senior software architect with extensive experience of security solutions. He has helped implementing IdentityServer in organizations over the world, often in combination with his Saml2 packages. Since 2021, Anders works with Duende Software Inc on designing and implementing authentication solutions built on IdentityServer.

Developer advocate at Styra with a long background in software development, security and identity systems in primarily distributed environments. When not in front of his computer he enjoys watching football, cooking and Belgian beers.

Camilla spends a lot of her time building machine learning systems and thinking about the future that's already here, just not evenly distributed. 

Cecilia Wirén is a senior devloper from Active Solution. She has been selected as Microsoft MVP for several years and is frequently speaking at Conferences and for User Groups. Last couple of years she has found herself in the DevOps area but is still a developer by heart and also still cares a lot about security. She find herself a new interesting hobbie now and then but  constantly love board games.  

Chris is a Senior Customer Engineer on the Fast Track for Azure team at Microsoft. He has a focus in modern applications built with DevOps, microservices, containers, Single Page Apps, RESTful APIs, and cloud technologies following agile practices. In his free time, Chris is a speaker at numerous meetups, an avid reader and a gamer.

Christopher is from Rotterdam, the Netherlands, and of both Dutch and American nationality. Christopher studied at the University of Amsterdam, majoring in Neuroscience with a Computer Science minor. He achieved his Masters in Information Sciences, and joined Cisco through the Graduate program. He was a Consulting Systems Engineer for 4 years in the Northern European security team and a Developer Advocate with focus on Security in Cisco DevNet for 2.5 years. He is now an Engineering Product Manager for SecureX, with focus on automation.

Programmer with an interest for security. Uses high-quality and low-latency development to drive security. Agile aficionado, DDD enthusiast, and DevOps admirer. Author of "Secure by Design" [Manning]. 

Daniel Deogun is a Coder and Quality Defender who brings order to a chaotic world of bits and bytes using good design and clean code. He is author of the book Secure by Design and as a developer, Daniel started to play with Java in 1997. His extensive experience ranges from patient critical pacemaker systems to web applications to high performant software in the gaming industry. Combining this with his passion for tech have made him a frequent speaker at conferences all over the world. 

Dr. Daniela S. Cruzes is a Professor at the Norwegian University of Science and Technology (NTNU) and a Lead Security Researcher in VISMA. Previously, she worked as a senior research scientist at SINTEF in Norway. She has also been a researcher fellow at the University of Maryland and Fraunhofer Center for Experimental Software Engineering-Maryland. Dr. Daniela Cruzes received her Dr.ing in experimental software engineering from the University of Campinas - UNICAMP in Brazil in 2007. Her research interests are empirical software engineering, research methods and theory development,  synthesis of SE studies, software security, software testing and agile and DevOps.

Dominick spent most of his professional career implementing security systems for his customers and reading protocol specifications. This resulted in a number of popular open-source projects like IdentityServer and IdentityModel. Since 2020 he runs Duende Software Inc together with his longtime friend and colleague Brock Allen. Duende provides a sustainable home for the IdentityServer project and is the one-stop-shop for all things OpenID Connect and OAuth for .NET-based companies.

Espen is a developer and architect with over 25 years of experience. He has worked on everything from embedded systems, electronics and games to large scale cloud applications. He is as full-stack as they come. Espen started coding at age six on a C64, and has been cranking out software ever since. 

He served as the principal architect, tech lead and lead security 
engineer on the compensation scheme for Covid-19 suffering 
businesses released by the Norwegian government. 

Espen was the Senior VP of Technology Exploration for DNB in San Fransisco and is currently doing technology and security research in DNB NewTechLab.

Felix Leder has trained specialized teams across the world on cybersecurity and machine learning, driving open knowledge sharing and enabling cooperation and innovation.

Prior to joining Crosspoint Labs, Dr. Leder led R&D teams at Symantec, NortonLifeLock and Blue Coat. He also conducted research projects for global technology leaders like Google, Microsoft, T-Mobile, and Nokia.

Open source and information sharing are close to his heart and Dr. Leder regularly speaks at security conferences across the globe. He has also been involved in Google’s Summer of Code and served 12 years on the board of The Honeynet Project.

Dr. Leder holds a Ph.D. in malware, with a minor in economics, from the University of Bonn in Germany where he conducted his research in cooperation with the Fraunhofer Institute. Persistence and development are key parts of his life, and he has competed in multiple Ironman Triathlon World Championships.

George has been a tech geek for more than 20 years with a passion for technology and the Internet. 

I love learning, teaching and growing. Cyber Security Cloud Solution Architect by day, gamer by night I am happiest when I'm being social and adding value to those around me.

I have a broad range of interests in technology starting in hardware and infrastructure, maturing into cloud, devops and code, cyber security with both red and blue team activities and finally augmented, virtual and mixed reality.

Halvor Sakshaug is involved in everything AppSec at Forsta (Confirmit+Dapresy+FocusVision). His main interests are Content Security Policy (and everything else that can protect the client), bug bounties, teaching security, and looking for vulnerabilities.

In his spare time he does real debugging by helping people get rid of silverfish.

Ignat is a systems engineer at Cloudflare working mostly on platform and hardware security. Ignat’s interests are cryptography, hacking, and low-level programming. Before Cloudflare, Ignat worked as a senior security engineer for Samsung Electronics’ Mobile Communications Division. His solutions may be found in many older Samsung smart phones and tablets. Ignat started his career as a security researcher in the Ukrainian government’s communications services.

Jimmy Mesta is the Co-Founder and CTO at KSOC. He is a veteran security engineering leader focusing on building cloud-native security products. Prior to KSOC, Jimmy held senior leadership positions at a number of enterprises including Signal Sciences (acquired by Fastly) where he led a team of researchers and engineers. Jimmy is a well-versed public speaker and has presented at a variety of global conferences.

Joseph Katsioloudes makes cyber security easy for developers as part of his role at GitHub Security Lab. He chose this career path because  cyber was his own way, from a very young age, to provide ethical and dedicated service to organisations and the society as a whole. Latest public contribution include his YouTube series "SecurityBites" where he educates developers on common software bugs. Other highlights include a zero-day vulnerability for a Top 10 Cryptocurrency in 2018, the Final of International Innovation Awards in 2016, and Open-source contributions to Intelligence & Blockchain.

Josh has worked as a consultant in IT/Application Security and Risk for 15 years now as well as a Software Developer. In that time he has seen the good, the bad and the stuff which is sadly/luckily still covered by an NDA. He is currently Chief Technology Officer for Bounce Security where he spends his time helping organisations improve and get better value from their Application Security processes and providing specialist Application Security advice. In his spare time he co-leads the OWASP Application Security Verification Standard project and is on the OWASP Israel chapter board.

Kristian works in the newly established Application Security team in Equinor. Originally a Space Physicist by education, Kristian has worked as a full stack developer in Equinor for the last 5 years.

Dr. Kyle Kotowick is the founder of a Canadian consulting and development firm focusing on cloud infrastructure, security, and Internet-of-Things implementations for high-growth clients. He completed his Ph.D. in MIT's Computer Science and Artificial Intelligence Laboratory, joint with the Department of Aeronautics and Astronautics. He has served as a consultant, systems architect, and developer for global firms, startups, and universities; as a Lead Engineer for the Government of Canada; and as a researcher for military navigation systems and for life support systems in space. He specializes in working with both startups and enterprise clients to define requirements and explore possible solutions, as well as in leading the development of project architecture, cloud services, and back-end software.

Passionate about software development, application security and people. Application Security Advocate in Equinor's AppSec team

Pronouns she/her. Senior Advisor for the Digital Police Work (DPAF) at the Police in Norway. Previously, I was the Head for the Forensic Technology Services Lab at PwC in Oslo.

Forensics is my absolute passion. I research mostly within mobile forensics and browser forensics, but I’m always up for taking on new challenges. 

My talk is based on personal research on my very little spare time.

Magno Logan works as an Information Security Specialist for Trend Micro. He specializes in Cloud, Container and Application Security Research, Threat Modelling and Red Teaming. He has been tapped as a resource speaker for numerous security conferences around the globe. He is also a member of the CNCF SIG-Security team.

IT Consultant from Bouvet in long term engagement at Equinor. Am one of six engineers who develop, maintain and operate Equinor's Radix offering, an internal developer platform based on Kubernetes which powers more than 200 in-house applications. Security design is an important facet of my role, and my team strives to create a secure, managed developer platform without compromising on user-friendliness. 

Martin Altenstedt is a software developer and architect with 25 years of experience in Sweden's IT industry. He specializes in being able to take part in both the development and management of software.

Martin is head of the Security Office at Omegapoint, Gothenburg, a group of experts in application security that performs penetration tests and security reviews. He has developed several courses in secure application development and gives presentations on application development and security.


Martin Ertsås is a software developer working for Cisco Systems in Norway on their Telepresence Hardware Endpoints. His main interests are C++, Linux, Security, Embedded Systems, and Developer Happiness. Martin enjoys digging through new code to unravel how it works or spending time improving a tool or process to increase the happiness and productivity of those around him.

Husband, father of two very curious beings. Spent roughly 10 years in various Software Engineering roles before moving into Application Security Space.
Currently working at Veracode as a Researcher responsible  for Static Application Security Testing of Android and Javascript applications.

Michael Kerrisk is a trainer, author, and programmer who has a passion for investigating and explaining software systems. He is the author of "The Linux Programming Interface", a widely acclaimed book on Linux (and UNIX) system programming. He has been actively involved in the Linux development community since 2000, operating mainly in the area of testing, design review, and documentation of kernel-user-space interfaces. Since 2004, he has maintained the Linux "man-pages" project, which provides the primary documentation for Linux system calls and C library functions. Michael is a New Zealander, living in Munich, Germany, from where he operates a training business (man7.org) providing low-level Linux programming courses in Europe, North America, and occasionally further afield.

Mike is founder and CEO at Kosli, a developer tools startup for understanding DevOps changes. He has been delivering software in various cultures and industries for 20 years as an engineer, architect, consultant, and CTO. Based in Oslo, Mike helps to organize local DevOps events and meetups, and is also a trustee of the cyber dojo foundation.

Niels Tanis has got a background in .NET development, pentesting and security consultancy. He also holds the CSSLP certification and has been involved in breaking, defending and building secure applications. He joined Veracode in 2015 and right now he works as a security researcher on a variant of languages and technologies related to Veracode’s Binary Static Analysis service. He is married, father of two and lives in a small village just outside Amersfoort, The Netherlands.

Patricia Aas is an international speaker and has spoken at CppCon, ACCU, C++OnSea, NDC Security, NDC Oslo and many other conferences on subjects ranging from Sandboxing in Chromium to Vulnerabilities in C++. She has taught a range of subjects in Computer Science at the University of Oslo.

Patricia has a masters degree in Computer Science and 13 years professional experience as a programmer, most of that time programming in C++. During that time she has worked in codebases with a high focus on security: two browsers (Opera and Vivaldi) and embedded Cisco telepresence systems.

Petter has spent most of his career as a software developer. Having started out with desktop software development in C++, then moved to cloud development across the stack, and finally meddled with data engineering for a while, Petter has seen the DevSecOps scene from most angles. During the past year he has taken on application security work in Equinor, in recognition of the fact that this is still being overlooked a bit too often.

Philippe De Ryck helps developers protect companies through better web security. As the founder of Pragmatic Web Security, he travels the world to train developers on web security and security engineering. His Ph.D. in web security from KU Leuven lies at the basis of his exceptional knowledge of the security landscape. Google recognizes Philippe as a Google Developer Expert for his work on security in Angular applications.

Rouan is a software engineer and technical leader, who helps build outstanding teams and high-quality software. He's worked in a variety of technology stacks for companies in the financial services, education, leisure and energy sectors. He’s worked as a consultant and in product teams, helping teams learn good engineering practices and helping businesses transform the way they build software. He cares about keeping things simple, building inclusive teams, and sharing what he learns.

Scott Helme is a security researcher, consultant and international speaker. He can often be found talking about web security and performance online and helping organisations better deploy both.

Founder of report-uri.com, a free CSP report collection service, and securityheaders.com, a free security analyser, Scott has a tendency to always be involved in building something new and exciting.

Steinar is a programmer at heart but spends most of his time on the "softer" parts of development. He has been working for the health sector in Norway for the past six years, where he has been involved in the development and establishment of the authentication service HelseID, and for the past couple of years, he has been involved in conceptualizing and establishing a common trust framework for data sharing for the health sector.

Steinar feels a genuine love for the OAuth Framework and OpenID Connect protocol and has a profound interest in the security mechanisms that make the protocols safer.

Stephen is a security consultant and crusted-on PHP developer who spends his days doing Laravel Security Audits and Penetration Tests. When he’s not trying to hack his client’s websites, he teaches Laravel developers about security concepts through his Laravel Security in Depth mailing list. Stephen’s idea of fun is spending a year cleaning infected WordPress sites and picking locks. 

Steve Wade is currently one of the founding engineers at KSOC, a Kubernetes security startup. Before his current role, Steve held Platform leadership roles at UnderWrite Me and Mettle. During these roles, he leveraged the concept of GitOps to provide self-service platforms to developers. He has also provided Kubernetes consultancy and training worldwide during his time as a Consultant at Apprenda. Steve has served in leadership roles across many verticals including real estate, gaming, and the UK parliament.

Steve has a BSc in Computer Science and is passionate about cloud-native software development and distributed computing. You can find him as @swade1987 on Twitter and GitHub.

Ståle Pettersen (@kozmic) is leading the Product & Application Security team within Schibsted that focuses on cloud security and application security. He has 15 years experience as a developer and a security enthusiast .

Tobias Ahnoff is an experienced .NET developer and architect with focus on application security. He specializes in implementing authentication flows and authorization for web applications and APIs that manage sensitive data in the bank, finance, and health sectors.

Tobias performs security reviews and penetration tests as part of Omegapoint Cybersecurity Gothenburg,  a group of experts in application security. He also gives courses in application security and is an appreciated speaker in OAuth2 and OpenID Connect areas.

Security girl in Microsoft Norway with experience more than 13 years in security. She spends all her time working closely with developers and architects to make security built in from design level. She is a big supporter of making security as culture and shifting security to the left. Viktorija believes that empowering developers and architects in security tasks by helping with education will increase security level without increasing additional workload.

During the free time, she deep dives into Cloud security, development, identity and access management.

Øyvind Fanebust is a developer, architect and co-founder at Stacc. Has 15 years of experience developing software, primarily in the financial sector.

NDC { Security }

Speakers

Anders Abel

Anders Eknert

Camilla Montonen

Cecilia Wirén

Chris Ayers

Christopher Van Der Made

Dan Bergh Johnsson

Daniel Deogun

Daniela Cruzes

Dominick Baier

Espen Agnalt Johansen

Espen Sande-Larsen

Felix Leder

George Coldham

Halvor Sakshaug

Ignat Korchagin

Jimmy Mesta

Joseph Katsioloudes

Josh Grossman

Kristian Reed