Name: NDC Security 2022
Start: 2022-04-04
End: 2022-04-07
Location: NDC Security

Anders is a senior software architect with extensive experience of security solutions. He has helped implementing IdentityServer in organizations over the world, often in combination with his Saml2 packages. Since 2021, Anders works with Duende Software Inc on designing and implementing authentication solutions built on IdentityServer.

Christian is a security engineer working with tracking and analyzing APT actors. He has previously worked with vulnerability research and malware analysis. He is an avid CTF player and regularly solves challenges related to binary exploitation for his team.

Together, Marit and Christian compete in CTFs with the top Norwegian CTF team, bootplug. At the time of writing bootplug is ranked 7 in the world. In competitions Marit usually starts at the easy end of the binary exploitation challenges, while Christian starts at the advanced end. Together they make a great team!

From Rotterdam, Netherlands, of Dutch and American nationality. Christopher studied at the University of Amsterdam, majoring in Neuroscience with a Computer Science minor. He achieved his Masters in Information Sciences, and joined Cisco through the Graduate program. He is now Consulting Systems Engineer Security for the Dutch market. 

Dag spent large parts of his youth in front of a Commodore 64 and various Amigas. Since the late 90s he has had the privilege to focus on the art and craft of professional software development. For the last 5 years the focus has been software security, in particular the challenge of determining exactly who the man behind the machine is.

Currently CTO and Co-Founder of Jit, the Continuous Security platform for Developers. David has a PhD in Bioinformatics and for the past 20 years has been a full-stack developer, CTO & technical evangelist, mostly in the cloud, and specifically in cloud security, working for leading organizations such as MyHeritage, CloudLock (acquired by Cisco) and leading the 'advanced development team' for the CTO of Cisco's cloud security (a $500M ARR BU).


Dominick spent most of his professional career implementing security systems for his customers and reading protocol specifications. This resulted in a number of popular open-source projects like IdentityServer and IdentityModel. Since 2020 he runs Duende Software Inc together with his longtime friend and colleague Brock Allen. Duende provides a sustainable home for the IdentityServer project and is the one-stop-shop for all things OpenID Connect and OAuth for .NET-based companies.

Einar has been building and breaking computer things since the mid 90s. Unable to stick to any single technology for long, he’s tinkered with anything from game development to network drivers. The last 8 years have been spent at VG, where he’s contributed to advanced data investigations, story presentation and newsroom security.

Erlend has worked as a developer and security consultant for over 14 years, trying to build and break many different types of systems. He spends some of his free time on security research and open source tools, and is the main author behind retire.js - a free and open source scanner for JavaScript. He is also the chapter leader of the Norwegian OWASP chapter.

Heather Wilde is CTO of theDifference and is also known as the Unicorn Whisperer because of her special focus on entrepreneurs. She is a professional growth expert, executive coach, best-selling author, and speaker. One of the founding team of Evernote, and co-founder of TWIP, she has won multiple awards for her writing, technology, coaching, and mentorship, including the 2020 International Impact Award for her latest book, "Birth of a Unicorn".

Both a patent inventor and game designer, she is trailblazing the way for other women to do the same. 
She has appeared on Huffpost Live and ABC News, and has appeared in Mashable, BBC News, Huffington Post, and in the Wall Street Journal as well as many other industry publications. Her clients cover North America, Australia, Asia, and the Middle East and she offers training internationally on tech topics such as Cybersecurity, Anticipatory Design, and the Dangers of Overwork.

Wilde's popular Inc and Forbes columns span social media, entrepreneurialism, startups, leadership, fundraising, and diversity issues. She lives in Las Vegas.

Jillian provides application security training for software engineers, so they have the skills to write secure code in any language. With over 10 years of AppSec experience, she has worn many hats: penetration tester, consultant, code reviewer, and threat modeler! However, her favorite hat to wear has always been that of a teacher, and that’s why she founded Gold Hat Security in 2019.

Jim Manico is the founder of Manicode Security where he trains software developers on secure coding and security engineering. He is also an investor/advisor for Nucleus Security, BitDiscovery, SecureCircle, and Inspectiv. Jim is a frequent speaker on software security practices, is a member of the Java Champion community, and is the author of "Iron-Clad Java: Building Secure Web Applications" from Oracle Press. Jim also volunteers for the OWASP foundation as the project lead for the OWASP Application Security Verification Standard and the OWASP Cheatsheet Series. For more information, see 

Marit is a Senior Software Engineer working with secure development and application security at Sopra Steria. She is engaged in the hacking community in Norway and is the former leader of Norway’s largest CTF, TG:HACK.

Together, Marit and Christian compete in CTFs with the top Norwegian CTF team, bootplug. At the time of writing bootplug is ranked 7 in the world. In competitions Marit usually starts at the easy end of the binary exploitation challenges, while Christian starts at the advanced end. Together they make a great team!

Martin Ertsås is a software developer working for Cisco Systems in Norway on their Telepresence Hardware Endpoints. His main interests are C++, Linux, Security, Embedded Systems, and Developer Happiness. Martin enjoys digging through new code to unravel how it works or spending time improving a tool or process to increase the happiness and productivity of those around him.

Michael Kerrisk is a trainer, author, and programmer who has a passion for investigating and explaining software systems. He is the author of "The Linux Programming Interface", a widely acclaimed book on Linux (and UNIX) system programming. He has been actively involved in the Linux development community since 2000, operating mainly in the area of testing, design review, and documentation of kernel-user-space interfaces. Since 2004, he has maintained the Linux "man-pages" project, which provides the primary documentation for Linux system calls and C library functions. Michael is a New Zealander, living in Munich, Germany, from where he operates a training business (man7.org) providing low-level Linux programming courses in Europe, North America, and occasionally further afield.

Michal is an experienced Security Researcher (White Hat), Cloud Solutions Architect with DevOps skillset and AWS Ambassador.
He is passionate about finding sources of leaking data and has already helped companies from various industries to improve their infrastructure security.
His experience also covers building a successful AWS partnership including preparation for competencies and programs.

Niall is an Irish guy who managed to end up in Norway after finding out the country existed when he was in New Zealand. He works at Microsoft helping customers with their technology investments. He has very strong opinions on security, web tech, food and wine.

Niels Tanis has got a background in .NET development, pentesting and security consultancy. He also holds the CSSLP certification and has been involved in breaking, defending and building secure applications. He joined Veracode in 2015 and right now he works as a security researcher on a variant of languages and technologies related to Veracode’s Binary Static Analysis service. He is married, father of two and lives in a small village just outside Amersfoort, The Netherlands.

Noaa is a full-stack developer, community manager, and tech writer who wishes to encourage developers to deepen the decisions we make during the development processes, research about the technologies we use and share our knowledge. She started her journey in the 8200 Unit of the IDF Intelligence forces where Noaa took her first steps in software development. In the last 4 years, her work has mainly included Angular, .NET, VanillaJS, and Typescript. She currently develops in React, NodeJS and Golang.

Patricia Aas is an international speaker and has spoken at CppCon, ACCU, C++OnSea, NDC Security, NDC Oslo and many other conferences on subjects ranging from Sandboxing in Chromium to Vulnerabilities in C++. She has taught a range of subjects in Computer Science at the University of Oslo.

Patricia has a masters degree in Computer Science and 13 years professional experience as a programmer, most of that time programming in C++. During that time she has worked in codebases with a high focus on security: two browsers (Opera and Vivaldi) and embedded Cisco telepresence systems.

Per has gone full circle security since 1994, from sales and operations to pentesting, auditing, consulting & CISO/CSO roles. With passwords & digital authentication as an obsession for more than 20 years, he says there are no other security issues affecting more users more frequently on a global basis - and we need to make it easier on people. He has a bunch of certifications, co-authored some research papers and is the founder of PasswordsCon.

Petteri Kivimäki is the CTO of the Nordic Institute for Interoperability Solutions (NIIS). NIIS is a non-profit association with the mission to ensure the development and strategic management of X-Road® and other cross-border components for digital government infrastructure. The republics of Estonia, Finland and Iceland are members of NIIS.

Before joining the NIIS, Petteri worked as a technology architect in a leading global professional services company. From 2014 to 2017 Petteri worked at the Population Register Centre of Finland as an information systems manager. He was the technical lead of X-Road implementation project in Finland and was coordinating the joint open source development of the X-Road solution between Finland and Estonia.

Petteri holds a Bachelor of Science in Software Engineering from the Metropolia University of Applied Sciences, Finland. Also,  Petteri is a certified cloud and technology architect.

Philippe De Ryck helps developers protect companies through better web security. As the founder of Pragmatic Web Security, he travels the world to train developers on web security and security engineering. His Ph.D. in web security from KU Leuven lies at the basis of his exceptional knowledge of the security landscape. Google recognizes Philippe as a Google Developer Expert for his work on security in Angular applications.

Rob has a strong focus on ALM and DevOps, automating manual tasks and helping teams deliver value to the end-user faster, using DevOps techniques. This is applied on anything Rob comes across, whether it’s an application, infrastructure, serverless or training environments. Additionally, Rob focuses on the management of production environments, including dashboarding, usage statistics for product owners and stakeholders, but also as part of the feedback loop to the developers. A lot of focus goes to GitHub and GitHub Actions, improving the security of applications and DevOps pipelines.

Writes software for fun and food and have done so since childhood. Very interested in security and healthcare. Have spent the last several years digging into the OAuth2 and OpenID Connect protocols for web security.

Scott Helme is a security researcher, consultant and international speaker. He can often be found talking about web security and performance online and helping organisations better deploy both.

Founder of report-uri.io, a free CSP report collection service, and securityheaders.io, a free security analyser, Scott has a tendency to always be involved in building something new and exciting.

Steinar is a programmer at heart but spends most of his time on the "softer" parts of development. He has been working for the health sector in Norway for the past six years, where he has been involved in the development and establishment of the authentication service HelseID, and for the past couple of years, he has been involved in conceptualizing and establishing a common trust framework for data sharing for the health sector.

Steinar feels a genuine love for the OAuth Framework and OpenID Connect protocol and has a profound interest in the security mechanisms that make the protocols safer.

T. Alexander Lystad has been with Visma for 7 years, working to adopt and extract value from Continuous Delivery, DevOps and Public Cloud.

Turid has over 10 years of experience as a senior security analyst in both the military and civillian security realms. She has extensive knowledge of cryptographic algorithms, and their application in real-world systems.

Through her experience at NSM, Conax, and Thales, she has worked both with development/implementation as well as evaluation/approval of crypto products.

Recently, she has turned her attention towards side channel analysis: how crypto applications can be attacked - and secured against attacks - from this angle.

Security girl in Microsoft Norway with experience more than 13 years in security. She spends all her time working closely with developers and architects to make security built in from design level. She is a big supporter of making security as culture and shifting security to the left. Viktorija believes that empowering developers and architects in security tasks by helping with education will increase security level without increasing additional workload.

During the free time, she deep dives into Cloud security, development, identity and access management.

NDC { Security }

Speakers

Anders Abel

Christian Resell

Christopher Van Der Made

Dag Helge Østerhagen

David Melamed

Dominick Baier

Einar Otto Stangvik

Erlend Oftedal

Heather Wilde

Jillian Ratliff

Jim Manico

Marit Iren Rognli Tokle

Martin Ertsås

Michael Kerrisk

Michal Brygidyn

Niall Merrigan

Niels Tanis

Noaa Barki

Patricia Aas

Per Thorsheim