Netlight x OWASP Stockholm

📢 Important news: Meetup will be decommissioned at the end of the year, so RSVP will be moving to our OWASP Chapter page then. To stay updated on future events, join the chapter here:
🔗 https://owasp.org/chapters/stockholm

Join us for an exciting afterwork event in collaboration with Netlight. In attendance will be leaders from the OWASP Stockholm chapter, Netlight clients, security professionals from Stockholm and the OWASP Stockholm community!

Whether you're deep in the security world or just getting started, this is a chance to connect with the community, hear from practitioners working on real problems, and dig into topics that matter.

When? Monday, 9 November
Where? The Bistro, Netlight Office, Regeringsgatan 25 floor 11

The evening at a glance:
17:00 — Doors open. Dinner and drinks will be available. Come early, mingle, and meet the community.

18:00 — Talks kick off, each being ~30min, followed by a 15min Q&A and break:

• Splitting Secrets — Shamir's Secret Sharing and Zero-Knowledge Proofs, by Filip Nilsson - Security / Platform Engineering @Netlight
• Securing Autonomous Agents, by Kristian Alvarez Jörgensen - Security Architect @Netlight
• OWASP and the CRA: A good match, by Olle Johansson (Consultant, OWASP SBOM and CycloneDX project lead)

20:30 — DJ, drinks, snacks, and mingle!

So don't forget to sign up - spots are limited! - and join us for an evening of talks, good food, and great conversations!

🌟More about the talks:
Olle E. Johansson - OWASP and the CRA: A good match
In this talk Olle E. Johansson will update on the EU CRA legislation and talk about the toolchain and projects needed to manage vulnerabilities. The Cyber Resilience Act (CRA) aims to safeguard consumers and businesses buying software or hardware products with digital elements. The CRA entered into force on 10 December 2024. The main obligations introduced by the Act will apply from 11 December 2027, with reporting obligations to apply as of 11 September 2026. One of the focus areas is vulnerability management. To keep a product secure during its lifetime, all 3rd party components will have to be monitored and up to date. At the heart of this process is the Software Bill of Materials, SBOM, which is used to monitor for known vulnerabilities in both Open Source and commercial components. The talk will cover projects such as OWASP ECMA TC54 - PURL, CycloneDX, CLE and TEA that fit right in with CycloneDX working with various kinds of bill-of-materials for a long time.

Filip Nilsson - Splitting secrets: Shamir’s Secret Sharing and Zero-Knowledge Proofs
How can you share a secret without revealing it, or prove you know something without showing what it is? Through two hands-on hobby projects, Filip will explore the fascinating world of cryptography, demonstrating how Shamir’s Secret Sharing and Zero-Knowledge Proofs work in practice and how these seemingly magical concepts can solve real-world problems.

Kristian Alvarez Jörgensen - Securing autonomous agents
Organizations are rushing into incorporating autonomous agents into their day to day operations, but little consideration has generally gone into how those systems should be secured. Kristian will dive into the unique challenges that attempting to secure agents presents and explore what potential solutions and tools that exist.

About the speakers
Olle E. Johansson
Olle E. Johansson is a consultant in the area of realtime communication and in embedded system security. He has been active in Open Source for many years as a developer, evangelist, trainer and speaker in many conferences worldwide. Olle is a member of the OWASP SBOM Forum and the OWASP CycloneDX industry working group. He is currently working on the CycloneDX Transparency Exchange API standard. Olle is currently a project leader for the Swedish DNS TAPIR project that is building Open Source software for analysing DNS resolver logs and finding bad actors.

Filip Nilsson
Filip Nilsson is a Platform/Security Engineering Expert at Netlight, specializing within cloud and platform security.

Kristian Alvarez
Kristian Alvarez is a Security Architect at Netlight specializing in security architecture and resident threat modeling evangelist.