If you don't live near an active Java User Group, or just yearn for more high quality technical sessions, The Virtual JUG is for you! If you live on planet Earth you can join. Actually even if you don't you can still join! Our aim is to get the greatest minds and speakers of the Java industry giving talks and presentations for this community, in the form of webinars and JUG session streaming from JUG f2f meetups. If you're a Java enthusiast and you want to learn more about Java and surrounding technologies, join and see what we have to offer!
Watch the live session broadcast on https://www.virtualjug.com
This is a virtual Meetup occurring at 5PM UK time (GMT). Just click to join when the time comes! The recording will be available immediately afterward.
Here's a timezone calculator: https://www.timeanddate.com/worldclock/fixedtime.html?msg=vJUG+Live+Hack%3A+Finding+Security+Vulnerabilities+Before+They+Find+You%21&iso=20190730T17&p1=136&ah=1
Take part in the live session discussion on our slack channel: https://bit.ly/2ramaDW
Open source modules are undoubtedly awesome. However, they also represent an undeniable and massive risk. You’re introducing someone else’s code into your system, often with little or no scrutiny. The wrong package can introduce severe vulnerabilities into your application, exposing your application and your user's data.
This talk will use a sample application, Goof, which uses various vulnerable dependencies, which we will exploit as an attacker would. For each issue, we'll explain why it happened, show its impact, and – most importantly – see how to avoid or fix it. We'll live hack exploits like the classic struts vulnerability that recently made it famous, along with Spring Break and several others.
Speaker: Simon Maple (@sjmaple)
Simon Maple is the Director of Developer Relations at Snyk, a Java Champion since 2014, JavaOne Rockstar speaker in 2014, Duke’s Choice award winner, Virtual JUG founder and organiser, and London Java Community co-leader. He is an experienced speaker, having presented at JavaOne, JavaZone, Jfokus, DevoxxUK, DevoxxFR, JavaLand, JMaghreb and many more including many JUG tours. His passion is around user groups and communities. When not traveling, Simon enjoys spending quality time with his family, cooking and eating great food. He gently caresses his Duke's Choice award whenever no one is looking.