DeveloperWeek 2025: Full Schedule

arrow_back View All Dates

11:00am PST

[Virtual] PRO WORKSHOP: Embracing Rust for Java and TypeScript Developers

Tuesday February 18, 2025 11:00am - 11:50am PST

Ramnivas Laddad, Exograph, Co-founder

Rust has been the most loved programming language for the past eight years, as highlighted by StackOverflow's developer survey. Its acclaim is backed by adoption from tech giants like Microsoft, Google, and Meta. Rust's blend of expressiveness, performance, safety, and fearless concurrency makes it ideal for multi-core CPUs. Additionally, Rust's ability to compile into WebAssembly enables seamless execution in browsers and edge computing environments.

Mastering Rust can be challenging, especially for developers with a background in non-system languages. Adopting Rust with the right mindset and suitable projects is crucial for a smooth transition and successful implementation.

In this talk, we will explore Rust's core principles and provide practical guidance for developers experienced in Java, TypeScript, and like languages. We will highlight projects where Rust excels, offering high value with minimal risk.

Speakers

Ramnivas Laddad

Co-founder, Exograph

Ramnivas leads the development of Exograph, a declarative approach to backends written in Rust. He has led innovation in Spring Framework and Cloud Foundry since their beginning. Ramnivas is the author of AspectJ in Action, the best-selling book on aspect-oriented programming lauded... Read More →

Tuesday February 18, 2025 11:00am - 11:50am PST
VIRTUAL DeveloperWeek PRO STAGE https://app.events.ringcentral.com/events/developerweek-productworld-ai-devworld-2025/reception

OpsWorld

Session Type PRO Workshop Day (Tues)
Conferences OpsWorld, Virtual
In-Person/Virtual Virtual

12:00pm PST

[Virtual] PRO WORKSHOP: Bolster Your Bug Bounty – Code Search & Variant Analysis Techniques

Tuesday February 18, 2025 12:00pm - 12:50pm PST

VIRTUAL DeveloperWeek PRO STAGE

Milan Williams, Semgrep, Senior Product Manager
Austin Theriault, Semgrep, Software Engineer

With so many repositories, organizations can struggle to locate and remediate recurring insecure code patterns. In this talk, you will understand the fundamentals of bug bounty programs, their importance, and common inefficiencies. Attendees will learn how to perform variant analysis, refine searches to reduce false positives and find vulnerabilities quickly. By leveraging these techniques, security teams can identify and reuse previous findings, extending the impact of their bug bounty program and significantly reducing costs. This technical session also provides a detailed architectural overview of building an in-house code search engine, drawing from our own experience. We'll share our wins & woes through multiple iterations, lessons learned, and preferred technologies. Our session concludes with a practical end-to-end walkthrough of a sanitized bug bounty report. Join us to gain knowledge to implement these strategies and technologies in your own engineering practice.

Speakers

Milan Williams

Senior Product Manager, Semgrep

Milan Williams is a Senior Product Manager at Semgrep, where she helps security engineers and developers work together to ship secure software. She recently graduated from Harvard University with degrees in Computer Science and Physics. In her free time, you can find her running in... Read More →

Austin Theriault

Software Engineer, Semgrep

Tuesday February 18, 2025 12:00pm - 12:50pm PST
VIRTUAL DeveloperWeek PRO STAGE https://app.events.ringcentral.com/events/developerweek-productworld-ai-devworld-2025/reception

OpsWorld

Tracks & Topics Enterprise, DevOps
Session Type PRO Workshop Day (Tues)
Conferences OpsWorld, Virtual
In-Person/Virtual Virtual

1:00pm PST

[Virtual] PRO WORKSHOP: The Dark Side of Open Source Productivity

Tuesday February 18, 2025 1:00pm - 1:50pm PST

VIRTUAL DeveloperWeek PRO STAGE

Derek Francour, Endor Labs, Solutions

There is a dark side to productivity with open source. In modern applications, the majority of code on which an application is built isn’t code written by your team. Modern applications are built on the backs of volunteer communities and open-source software. These volunteers and their software delivery practices all become potential attack vectors. The truth is that most organizations do not factor open-source supply chain attacks into their organization’s threat models today. Security incidents such as the CodeCov bash uploader script, the npm colors, and faker intentionally introduced malicious commits, and the recent PyPi backdoors targeting AWS credentials highlight the impact of supply chain attacks as a scalable attack pattern. To spread awareness on supply chain attacks so that organizations can scalably handle them we propose baking supply chain attacks into existing threat modeling procedures and software development culture so that organizations can champion supply chain management of open source in the places where they are most impactful, at development time. We will present a comprehensive, comprehensible, and technology-agnostic taxonomy of attack vectors, created on the basis of hundreds of real-world incidents and validated by experts in the domain. Following, we will discuss the types of defenses you can put in place to detect and respond to such modern day attacks and how you can work these defenses in based on your program’s maturity.

Speakers

Derek Francour

Solutions, Endor Labs

As a Solutions Architect at Endor Labs, Derek Francour helps teams implement application security programs that don't slow down developers and make upgrading open source dependencies easier. Previously, Derek worked in Healthcare IT as a full-stack web developer and solutions engineer... Read More →

Tuesday February 18, 2025 1:00pm - 1:50pm PST
VIRTUAL DeveloperWeek PRO STAGE https://app.events.ringcentral.com/events/developerweek-productworld-ai-devworld-2025/reception

Cloud Native World

Tracks & Topics Enterprise
Session Type PRO Workshop Day (Tues)
Conferences OpsWorld, Virtual
In-Person/Virtual Virtual