Name: ArnhemJUG - July meetup
Start: 2023-07-20T17:00:00+02:00
End: 2023-07-20T21:30:00+02:00
Location: TenneT TSO

**ArnhemJUG**
Interested in Java and also in security? Then this meetup is something for you! In collaboration with Sonatype we are welcome again at TenneT for our July meetup.

**Agenda**

* 17:00 CET walk-in
* 17:30 – 18:30 Food and drinks
* 18:30 – 19:30 talk: Hidden security features of the JVM - everything you didn't know and more by Steve Poole
* 19:30 – 19:45 break
* 19:45 – 20:45 talk: Stranger Danger: Your Java Attack Surface Just Got Bigger by Brian Vermeer
* 20:45 – 21:30 drinks

**Hidden security features of the JVM - everything you didn't know and more**
Java 17 announced the depreciation of the Security Manager (which is ok since hardly anyone used it) but that doesn’t mean the JVM leaves you vulnerable.

Many design features in the JVM and the JDK are there to help keep your application safe from harm.

In this session, we’ll walk through these points - from compiler to bytecode to runtime and give you a refresher on how to get the best from these features. We’ll also look at new things in the works, compile-to-native consequences and even some off-the-wall “it’s just an idea” thoughts about how to make the JVM an even more secure environment.

**About Steve Poole**
Director of Developer Advocacy, Security Champion, DevOps practitioner (whatever that means) Long time Java developer, leader and evangelist. I’ve been working on Java SDKs and JVMs since Java was less than 1. JavaOne Rockstar, JSR leader and representation, Committer on open source projects including ones at Apache, Eclipse and OpenJDK. A seasoned speaker and regular presenter at international conferences on technical and software engineering topics.

**Stranger Danger: Your Java Attack Surface Just Got Bigger**
Building (cloud-native) Java applications is undoubtedly awesome. However, it comes with undeniable new risks. Next to your own code, you are relying on so many other things. Blindly depending on open-source libraries and Docker images can form a massive risk for your application. The wrong package can introduce severe vulnerabilities into your application, exposing your application and your user's data. Join this hands-on Java cloud-native live-hacking session where we’ll show common threats, vulnerabilities, and misconfiguration. Most importantly, you’ll learn how to protect your application with actionable remediation and best practices.

**About Brian Vermeer**
Java Champion, Staff Developer Advocate and Software Engineer work for Snyk with over a decade of hands-on experience in creating and maintaining software. He is passionate about Java, (Pure) Functional Programming and Cybersecurity. Brian is a JUG leader for the Virtual JUG and the NLJUG. He also co-leads the DevSecCon community and is a community manager for Foojay. He is a regular international speaker at mostly Java-related conferences like JavaOne, Devnexus, Devoxx, Jfokus, JavaZone and many more. Besides all that, Brian is a military reserve for the Royal Netherlands Air Force and a Taekwondo Master / Teacher.

Pepijn Schildkamp

Femke Koppen

ArnhemJUG

Technology

Java

Open Source

Software Development

JavaScript

Web Development

Java Concurrency

Java Virtual Machine

ArnhemJUG - July meetup

Software Security

TenneT TSO

Share

ArnhemJUG

ArnhemJUG - July meetup

ArnhemJUG

Details

Members are also interested in