Join us for Secure9 2022!

What is Secure9?

In Levi9 we believe in empowerment. We think that security should be driven by passion and genuine interest of everyone in the company. To get people enthusiastic and curious about security, we started an annual event: Secure9.
This year the slogan of the event is They call me 009. Why? Because everyone in the company is a special 009 agent, making sure we are safe, our customers are protected, and we strive together for better security.
Whether you are a levininer, Levi9 customer, Alumni or partner – we welcome you at the event.
Get into Secure9 vibe and join our force of 009 agents!

Program

Monday October 17th 15.00-16.00 CEST

Jim Manico

What does OWASP Top 10 2022 mean to you?

The OWASP Top 10 recently received a major update which represents a broad consensus about the most critical security risks to web applications in today’s challenging security landscape. To build safe software all developers need to embrace and practice various secure coding techniques. Join this talk to find out more about defensive instructions in relation to the OWASP Top Ten to help you in writing secure code.

Jim Manico is the founder of Manicode Security where he trains software developers on secure coding and security engineering. He is also an investor/advisor for 10Security, Aiya, MergeBase, Nucleus Security, KSOC and Inspectiv. Jim is a frequent speaker on secure software practices, is a member of the Java Champion community, and is the author of “Iron-Clad Java: Building Secure Web Applications” from Oracle Press. Jim also volunteers for the OWASP foundation as the project lead for the OWASP Application Security Verification Standard and the OWASP Cheatsheet Series. For more information, see https://www.linkedin.com/in/jmanico

Tuesday October 18th 15.00-16.00 CEST

Milic Vuletic

Phishing – a never ending story

Would you ever guess what is the best day to get phished?! Join this session to learn from real life cases on how other companies have learned this lesson the hard way. Find out how you can become 009 agents and never get fooled by phishing emails.

Milic Vuletic’s Security career recipe: throw in 10 years of development, mix with 10 year of testing experience, spice it with a lot of passion for Security; bring offensive security into the pot and add commitment to explore new things. And here you are leading Cyber Security Team in Levi9. Join his session and find out more about phishing, how it is done and how to avoid it.

Wednesday October 19th 15.00-16.00 CEST

Anastasiia Voitova

Data is a new security boundary

Modern application platforms gather, process and store data everywhere: from mobile apps and web to backend services, data warehouses, ML models, and BI analytics tools. The data protection approach has switched from “protect the data where it’s stored” to “protect the data wherever it exists”.
We will talk about data security 101: application level encryption (ALE), end-to-end encryption (E2EE), searchable encryption, and zero knowledge / zero trust architectures. Then we will discuss how data security is combined with traditional security controls (appsec & infrasec) to build secure & resilient systems.

Anastasiia Voitova builds security tools for protecting data during the whole lifecycle (encrypt everything!). She shares a lot about “boring cryptography”, end-to-end encryption, data security, zero knowledge / zero trust systems, software security architecture. She speaks on international conferences, conducts workshops and training for developers, and co-organizes cybersec events.

Thursday October 20th 15.00-16.00 CEST

Ruslan Plakhuta

Blockchain security through transparency

Together we will look into how blockchain works, what are the new security paradigms, what are weak points and how security in blockchain is achieved through transparency.

Ruslan Plakhuta is a software architect and IT professional developing software products and managing productive teams for more than 15 years. He is a proud Levi9 Alumni and Levi9 Software Architect who was driving many changes and improvements in Levi9 as a part of Arch9 team. Since 2016 he is working with crypto building various dapps in NFT, Defi and GameFi areas. He is co-founder of Toreus.Finance and Metasvit.io. His mission is to accelerate blockchain adoption, by making it more accessible and understandable. Through his consultancy work he shares the passion about this topic with businesses in the Netherlands.

Friday October 21th 15.00-16.00 CEST

Shairesh Algoe

The Red Cross of the Internet

The Dutch Institute for Vulnerability Disclosure (DIVD) scans the internet for vulnerabilities and reports these to people who can fix them. Shairesh will go into some of the recent cases, ranging from KaseyaVSA, to Log4j in 2021 and shares some of the 2022 highlights. He will also give an introduction on how the DIVD has professionalized vulnerability disclosure and why they are allowed to somewhat break laws on computer crime and privacy.

Shairesh Algoe is passionate about information security and enjoys teaching and telling stories. He manages to keep information security simple with more than 12 years of experience in technical and leadership roles. His day job is being a Chief Information Security Officer for TM-Pro, a FinTech company which provides banking as a service platform. He is also a board member at the DIVD, as well as an entrepreneur who delivers security products and services to multiple companies. Shairesh is a speaker, and he teaches students about information security and quantum technology.

Meet the Secure9 Team