Ruxmon November

Author: Danielle Rosenfeld-Lovell
Title: Unraveling GraphQL

Abstract
Did you know that not all APIs are RESTful? Me neither at some point in the relatively recent past! This talk will explore bits and bobs related to GraphQL. We'll look at how it works, how to find GraphQL endpoints, and look at some GraphQL exploit techniques from the lens of the OWASP Top 10.

——

Title: DevOps Engineering 101

Summary: While most of us aren't doing DevOps every day, the teams we're trying to secure or test probably are. This talk is a whirlwind tour of infrastructure as code and configuration management, where I'll take a look at some popular tools and security considerations.