Name: SBA Security Meetup I Winter Edition
Start: 2024-02-06T18:00:00+01:00
End: 2024-02-06T21:00:00+01:00
Location: SBA Research

**This meeting is organized as an on-site event only.**

**Security in Agile Development**
By: Daniel Schwarz

Vulnerabilities in web applications have served as the number one gateway for cyber attacks since the beginning of the world wide web - and they still do to this day.
Especially in agile development, where organizations pursue quick adaptations and short release cycles, the challenge of ensuring security in the resulting products is greater than ever.
In this talk we will take a look at the most important security best practices, including the usage of modern AI, and discuss approaches to include those into today’s agile development processes.

**Turning Container security up to 11 with Capabilities**
By: Mathias Tausig

Container technologies, as popularized first by Docker, already offer a lot of security benefits out of the box the developers and DevOps professionals have come to rely upon.

While this has proven to be valuable for increasing the security of many application deployments, it still leaves some room for improvement. Firstly, a lack of deep understanding what protections Docker is offering out of the box can be observed commonly, leading to a dangerous overreliance on the container engine.
Secondly, the attack surface of your application can be significantly reduced by leveraging the *capabilities* functionality of the Linux kernel. Using it, one can greatly reduce the system function a running container has access to, thus limiting the exploitation consequences of a vulnerability in an application.
This talk explains the possibilities of limiting *capabilites* in a container runtime.

**Speaker & Details:**
Daniel Schwarz (Senior Security Architect at condignum)
Mathias Tausig (Information security consultant at SBA Research)
Talk language: English
**On-site event only!:** **Floragasse 7, 1040 Vienna (5. floor)**

**About the Speakers:**
\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
Daniel Schwarz is a Senior Security Architect at condignum GmbH in Vienna. After graduating from the St. Pölten University of Applied Sciences in the field of IT and information security, he started his career as a penetration tester and over the last decade has increasingly focused on the topics of secure software development, secure design, threat modeling and security requirements engineering as a security consultant. In his role at condignum GmbH, he is currently working on the question of how exactly these topics can be implemented efficiently and appropriately for organizations of all sizes.

Mathias Tausig received a master’s degree (DI/MSc) in Technical Mathematics from the [TU Wien](https://www.tuwien.at/en). His professional experience includes a tenure as a Security Officer for a Certification Authority and lecturing IT-Security at the [University of Applied Sciences Campus Wien](https://www.fh-campuswien.ac.at/en/) as well as software development and system administration. This allows him to get a holistic view on many IT security related problems.

**Agenda**
\*\*\*\*\*\*\*\*\*
17:55: Gathering
18:15: Talk: “Security in Agile Development”
19:00: Q&A
19:10: Talk:Turning Container security up to 11 with Capabilities
19:50: Q&A
20:00: Drinks & Get together

Looking forward to seeing you there!
Picture source: craiyon AI

Nicolas Petri

Security Meetup by SBA Research

Technology

Software Development

Web Technology

Web Security

Web Development

Mobile Technology

Hacking

Information Security

Computer Programming

Application Security

Software Security

Computer Security

Web Application Security

Java

JavaScript

SBA Security Meetup I Winter Edition 

SBA Research

Share

SBA Security Meetup I Winter Edition

Security Meetup by SBA Research

Details

Members are also interested in