Property-based testing with Java + log4Shell

Agenda:
18:00 doors open
18:20 please grab drinks!
18:30 Property based testing in Java - Jan Stępień / innoQ
19:30 Break, Networking, Pizza
19:55 Raffle
20:00 log4shell
21:00 Networking

Let’s Test That Real Quick: Property based testing in Java
Property-based testing changes the way we look at our test suites. Instead of specifying test cases one after another, this advanced testing technique enables us to automatically generate a stream of inputs. Despite its potential, property-based testing still remains under the radar within the Java community. Let’s try to uncover its strengths together. The talk will discuss how property-based testing compares to traditional testing methods and demonstrate its principles with simple examples. In order to bust the myth of the inapplicability of property-based testing in a real-world setting we’ll bring up some use cases from industry. Finally, we’ll wander into the world of concurrency and the automation of race condition detection.

about Jan Stępień / innoQ:
Jan works with people to build better soft­ware. His interests span archi­tecture, devel­opment, and opera­tions. He looks for simple solutions for complex problems.

Talk 2:
Log4Shell Retrospective

Looking behind the immediate pain of Java's now infamous logging library Log4j:
* How does the vulnerability work?
* Why is it relatively complex to detect and evaluate both for custom and off the shelf software?
* How can you monitor exploitation attempts?

Stop both panic and long-term security issues.