OWASP Switzerland Community Event, March 2026

The OWASP community is getting together for another meetup in March 2026! Join us for some security talks, good company, and a little Apéro.

Program:
16:30 - Doors open: Grab a drink, meet old and new friends from the OWASP Switzerland community

17:00 - Hello from OWASP Switzerland

17:05 - Beyond the Buzzword: A Data-Driven Analysis of LLM-Generated Code Vulnerabilities - (Rebecca Balebako, ZHAW)

18:05 - (5min break)

18:10- Swiss e-ID, Architecture and overcoming practical issues - (Martin Scheck, Zühlke Engineering AG)

19:10 - Networking & Apéro🍷- Grab a bite and chat with old and new friends

Talk Details:

Beyond the Buzzword: A Data-Driven Analysis of LLM-Generated Code Vulnerabilities (Working Title, may change):
Can LLMs write more secure code than humans? Or are they better security reviewers? In this talk we discuss what data and measurements are needed to answer these questions. We will take a sceptical look at marketing claims regarding LLM benchmarks, describe attempts to define "secure code", and describe research measuring secure code generation. By the end of this talk you will be able to take a clear-eyed view of any benchmarks and claims that LLMs generate secure code.

Swiss e-ID, Architecture and overcoming practical issues (Working Titel and working Abstract, will change):
The Swiss e-ID, planned for release in late 2026, is based on decentralized identity (SSI) standards, offering strong security and privacy properties in theory. This talk provides a practical look at the e-ID, its ecosystem, and underlying standards, drawing on insights from a real-world project. We will assess its suitability for use cases such as identity verification and digital authentication, and discuss how it fits with existing identity and access management architectures and protocols. Attendees will gain a clear understanding of the ecosystem, security and privacy challenges, and practical considerations for applying the Swiss e-ID in real-world systems.