Name: NDC Security 2022
Start: 2022-04-04
End: 2022-04-07
Location: NDC Security

Jillian provides application security training for software engineers, so they have the skills to write secure code in any language. With over 10 years of AppSec experience, she has worn many hats: penetration tester, consultant, code reviewer, and threat modeler! However, her favorite hat to wear has always been that of a teacher, and that’s why she founded Gold Hat Security in 2019.

Brock Allen is a consultant specializing in .NET, web development, and web-based security. He also is an instructor for the training company DevelopMentor, associate consultant for Thinktecture, a contributor to the Thinktecture IdentityModel and IdentityServer open source projects and a contributor to the ASP.NET platform.

Christian is a security engineer working with tracking and analyzing APT actors. He has previously worked with vulnerability research and malware analysis. He is an avid CTF player and regularly solves challenges related to binary exploitation for his team.

Together, Marit and Christian compete in CTFs with the top Norwegian CTF team, bootplug. At the time of writing bootplug is ranked 7 in the world. In competitions Marit usually starts at the easy end of the binary exploitation challenges, while Christian starts at the advanced end. Together they make a great team!

Dag spent large parts of his youth in front of a Commodore 64 and various Amigas. Since the late 90s he has had the privilege to focus on the art and craft of professional software development. For the last 5 years the focus has been software security, in particular the challenge of determining exactly who the man behind the machine is.

Dominick spent most of his professional career implementing security systems for his customers and reading protocol specifications. This resulted in a number of popular open-source projects like IdentityServer and IdentityModel. Since 2020 he runs Duende Software Inc together with his longtime friend and colleague Brock Allen. Duende provides a sustainable home for the IdentityServer project and is the one-stop-shop for all things OpenID Connect and OAuth for .NET-based companies.

Erlend has worked as a developer and security consultant for over 14 years, trying to build and break many different types of systems. He spends some of his free time on security research and open source tools, and is the main author behind retire.js - a free and open source scanner for JavaScript. He is also the chapter leader of the Norwegian OWASP chapter.

Jim Manico is the founder of Manicode Security where he trains software developers on secure coding and security engineering. He is also an investor/advisor for Nucleus Security, BitDiscovery, SecureCircle, and Inspectiv. Jim is a frequent speaker on software security practices, is a member of the Java Champion community, and is the author of "Iron-Clad Java: Building Secure Web Applications" from Oracle Press. Jim also volunteers for the OWASP foundation as the project lead for the OWASP Application Security Verification Standard and the OWASP Cheatsheet Series. For more information, see 

Marit is a Senior Software Engineer working with secure development and application security at Sopra Steria. She is engaged in the hacking community in Norway and is the former leader of Norway’s largest CTF, TG:HACK. 

Together, Marit and Christian compete in CTFs with the top Norwegian CTF team, bootplug. At the time of writing bootplug is ranked 7 in the world. In competitions Marit usually starts at the easy end of the binary exploitation challenges, while Christian starts at the advanced end. Together they make a great team!

Michael Kerrisk is a programmer, writer, and trainer who has a passion for investigating and explaining software systems. He is the author of "The Linux Programming Interface", a widely acclaimed book on Linux (and UNIX) system programming. He has been actively involved in the Linux development community since 2000, operating mainly in the area of testing, design review, and documentation of kernel-user-space interfaces. Since 2004, he has maintained the Linux "man-pages" project, which provides the primary documentation for Linux system calls and C library functions. Michael is a New Zealander, living in Munich, Germany, from where he operates a training business (man7.org) providing low-level Linux programming courses in Europe, North America, and occasionally further afield.

Patricia Aas is an international speaker and has spoken at CppCon, ACCU, C++OnSea, NDC Security, NDC Oslo and many other conferences on subjects ranging from Sandboxing in Chromium to Vulnerabilities in C++. She has taught a range of subjects in Computer Science at the University of Oslo.

Patricia has a masters degree in Computer Science and 13 years professional experience as a programmer, most of that time programming in C++. During that time she has worked in codebases with a high focus on security: two browsers (Opera and Vivaldi) and embedded Cisco telepresence systems.

Philippe De Ryck helps developers protect companies through better web security. As the founder of Pragmatic Web Security, he travels the world to train developers on web security and security engineering. His Ph.D. in web security from KU Leuven lies at the basis of his exceptional knowledge of the security landscape. Google recognizes Philippe as a Google Developer Expert for his work on security in Angular applications.

Writes software for fun and food and have done so since childhood. Very interested in security and healthcare. Have spent the last several years digging into the OAuth2 and OpenID Connect protocols for web security.

Scott Helme is a security researcher, consultant and international speaker. He can often be found talking about web security and performance online and helping organisations better deploy both.

Founder of report-uri.io, a free CSP report collection service, and securityheaders.io, a free security analyser, Scott has a tendency to always be involved in building something new and exciting.

Steinar is a programmer at heart but spends most of his time on the "softer" parts of development. He has been working for the health sector in Norway for the past six years, where he has been involved in the development and establishment of the authentication service HelseID, and for the past couple of years, he has been involved in conceptualizing and establishing a common trust framework for data sharing for the health sector.

Steinar feels a genuine love for the OAuth Framework and OpenID Connect protocol and has a profound interest in the security mechanisms that make the protocols safer.

Turid has over 10 years of experience as a senior security analyst in both the military and civillian security realms. She has extensive knowledge of cryptographic algorithms, and their application in real-world systems.

Through her experience at NSM, Conax, and Thales, she has worked both with development/implementation as well as evaluation/approval of crypto products.

Recently, she has turned her attention towards side channel analysis: how crypto applications can be attacked - and secured against attacks - from this angle.

Security girl in Microsoft Norway with experience more than 13 years in security. She spends all her time working closely with developers and architects to make security built in from design level. She is a big supporter of making security as culture and shifting security to the left. Viktorija believes that empowering developers and architects in security tasks by helping with education will increase security level without increasing additional workload.

During the free time, she deep dives into Cloud security, development, identity and access management.

NDC { Security }

Speakers

Jillian Ratliff

Brock Allen

Christian Resell

Dag Helge Østerhagen

Dominick Baier

Erlend Oftedal

Jim Manico

Marit Iren Rognli Tokle

Michael Kerrisk

Niall Merrigan

Patricia Aas

Philippe De Ryck

Rune Andreas Grimstad

Scott Helme

Steinar Noem

Turid Herland

Victoria Almazova