Actually no - we need to be careful that we create useful abstractions, not dangerous illusions. This talk reflects on two decades of building complex distributed systems, highlighting where abstractions helped and where illusions led to major disappointments.

Talk (60 min)

Platforms: Build abstractions, not illusions

Architecture

Cloud

DevOps

Tools

This session endeavours to transpose the principles of TDD into the leadership domain, introducing a novel approach dubbed as "Test-Driven Leadership."

Over the talk, we'll delve into the core aspects of Test-Driven Leadership, starting with the identification of testable leadership principles. We’ll explore how setting measurable objectives, creating testable leadership hypotheses, and identifying key metrics for verification can foster a culture of continuous improvement and assured success. Then, we’ll touch upon designing strategies that are structured around measurable outcomes, incorporating feedback loops, and utilising A/B testing in decision-making - drawing a parallel to the red-green-refactor cycle in TDD.

As we transition to the practical aspects of implementing and refining these testable strategies, real-world examples will spotlight how this approach has been instrumental in driving success in various organisational settings. The session will also address common challenges encountered in this journey and provide solutions and best practices to overcome them.

Join us in unfolding how the essence of Test-Driven Development can be reimagined to pioneer a culture of Test-Driven Leadership, bridging the chasm between theoretical principles and verifiable, real-world success.

Test-Driven Leadership: Crafting Testable Strategies

Soft Skills

Functional programming is an alternative style of writing code to the Object-Oriented paradigm that most of us are taught at the beginning of our careers, and it's not only simpler to learn than OO, but also results in a better overall codebase.

In this talk, I'm going to not only show you what the Functional Programming paradigm is, but I'm also going to explain how you can adjust your thinking and approach to problem solving to work in a functional manner.

There won't be any hard theory or talk of list theory, just immediately useful, practical coding technique.

Thinking Functionally with C#

Functional Programming

.NET

This untapped reservoir of information is cumbersome to access in large quantities in meaningful ways until now.

The goal is to unlock the dormant potential within your day-to-day operations and customer datasets, turning it into accessible and actionable intelligence.

Imagine the possibilities when you revitalise and extract meaningful value from these documents using the latest user-friendly AI tools and APIs.

In this talk you will discover practical strategies for various levels of effort, from simple to when things start to get tough.


From Dormant to Dynamic: Upcycling Documents with AI

This session is packed with practical examples and code demos of where and how high-performance APIs and language features can be applied to your applications.

This session will teach you about using types such as Span to process data and parse strings efficiently. We'll examine System.IO.Pipelines, offering high-performance I/O, and utilise ArrayPool to help reduce GC allocations. We'll also discuss how the low-level System.Text.Json APIs can dramatically improve JSON parsing.

We'll begin by focusing on when and why performance matters in applications. You'll learn how to profile and benchmark your code using a data-driven approach to focus your optimisations.

At first, these concepts may seem complicated, unapproachable and difficult to apply. In this session, Steve introduces high-performance newcomers to the features, showing you how they work, where they can be applied and how to measure performance improvements in your code.

This talk is for developers who, like Steve, are ready to begin their journey towards writing faster .NET code, which allocates less.

Turbocharged: Writing High-Performance C# and .NET Code

Microsoft

Sometimes leaders can't help them.
Teams recognize the origins of the mess but often grapple to break free.

Thankfully there are tried and true tactics to tackle the tech debt troubles, Today! You don't need a dramatic dedicated deconstruction department. You and your team can solve this yourselves!

Learn technical, political, and procedural techniques to create more joy in the new work with less pain from the old.

Sphere of Control: Techniques to Tackle Tech Debt Today

Agile

Continuous Delivery

People

Testing

We'll cover (1) Apple's current development ecosystem, (2) basic mental models for "spatial" computing, (3) Apple's SDKs, (4) useful 3rd-party SDKs, (5) performance pitfalls, (6) experimental interface design tips, and (7) useful snippets and patterns for quick XR app development.

Attendees will be able to demo one of many Apple Vision Pros as time and resources permit.

Workshop (60 min)

Part 1/2: Developing for the Apple Vision Pro

Mobile

UI/UX

3D Modeling

In this talk, I'll not only answer these questions, but give you actionable advice on how to improve your code review today!

I want to tell you:
- All the things you're doing wrong in your code review, both as an author and as a reviewer
- How to fix all those wrong things
- What we can do to make code reviews WAY better

Let's change the way we do code reviews. Let's do better than LGTM 👍 -- let's make the code review processes on our teams great!

👍 Looks GREAT To Me: Getting Past Bare Minimum Code Reviews

Cypress, Playwright or Selenium: choosing the right testing tool

What tools do they use? What skill sets are involved? And how can you and your team gain knowledge on better securing your systems and service?
Let us venture on a journey into the wonderful world that is web exploitation and learn how to use gamified safe environments to build skillsets to help us write better and safer software. Because once you learn how to hack, you never go back. This session is all about exploiting web tech, so no binary voodoo or super low level skills required.

How hacking works - Web edition

Security

How do you manipulate your history using commit amend, reset, rebase, and cherry-pick?

Furthermore, the workshop is pact with practical tips that help you to work with git: the right configuration, auto-correct of commands, recording merges, and many more.

The workshop is designed for developers that already have a basic knowledge of git but learned it through try and error. But it is also suitable for developers that are new to git and only have experience in other version control systems.

Prerequisites for the session are a local git installation, a text editor, and a free GitHub account.


Part 1/2: Deep dive into git

Languages

In this session you will get an introduction of Dapr and the Dapr building blocks. After that, you will learn how to apply Dapr yourself in a sample application during the hands-on part of the workshop.

The workshop features step-by-step instructions so you can work on this at your own pace. During the workshop you will get hands-on experience with the following Dapr building blocks: service invocation, state management, pub/sub, bindings and secret management.

Part 1/2: Dapr workshop: build microservice applications the easy way

Microservices

In this session, we will explore Microsoft's new Radius project, an open-source Cloud-native application platform designed to empower developers and platform engineers to collaborate on a common definition of an application and an environment. Leveraging them, teams can easily understand, deliver and manage applications that follow corporate best practices for operations and security by default. We will delve into the key features, benefits, and potential use cases of Radius, and discuss how it addresses the challenges of building and managing Cloud-native applications across multiple environments

The Future of Cloud-Native Application Development with Radius

A well-designed data model is crucial for NoSQL databases, as it determines scalability, performance, and cost.
We will start the session by reviewing the JSON format specifications. Then, we will collaborate to create a sample NoSQL data model and understand how to manage NULL and undefined values in NoSQL databases.
In distributed databases, an important task is to select a property that evenly distributes data and traffic. You will learn the consequences of choosing a suitable or unsuitable partition key for your data models. We will conclude the session by creating materialized views that may assist you with cross-partition queries.
If you are working or planning to work on a project with a NoSQL database, this session is for you!


Data modeling strategies in NoSQL databases

As it turns out, we can apply this philosophy to our build and CI/CD pipelines just as much as ever. In my personal journey, I've followed the bell curve from from basic building blocks, to rich, integrated systems, and all the way back down again.

Join me and learn how to pick the best building blocks for your build pipeline, with examples in C# and .NET, and above all—how to keep it simple.

Less is more—a build pipeline for the modern age

Residuality theory models software systems as interconnected residues - an alternative to component and process modeling that uses applied complexity science to make managing uncertainty a fundamental part of the design process.

An Introduction to Residuality Theory

This presentation will begin with a system design exercise, an overview of how we can express our design in the code defining the usage model of a system, and how our infrastructure deployment can benefit from this model. There will be a lot of code (mainly in CUE).

We'll finish with the insights on how some of the ideas of test driven development can help with our infrastructure code and deployments maintenance.

How Much Resources I Need?.. an Approach to Writing the Infra Code

Was it leading to over-testing and unnecessary complexity? Tests became a maintenance burden? Does it slow down the development process? Due to industry misconceptions, all that is normal.

I have good news. We can still change that. You can still reach enlightenment and become a TDD lover.

This talk tells you the story of what will happen once you decide to learn TDD. It will go through the challenges you will face in your journey and how to avoid being trapped by them. We'll debunk misconceptions and see an effective method of practising TDD.

If you are open to becoming TDD addicted, this session is for you. You can expect to go home inspired to master the testing craft.

Be prepared to be Test Infected. Beware, there's no cure!

How to fall in love with TDD

What's new in .NET 9 & C# 13

Cross-Platform

Oftentimes a successful attack is a clever combination of smaller vectors, which on their own do not seem very important or dangerous. That’s why to efficiently mitigate modern Internet threats the system should be built with the “defense in depth” in mind.

In this presentation we will discuss the various approaches and technical solutions Cloudflare implemented to protect infrastructure and services from the biggest Internet threats. We will review a layered approach to security starting from the Internet itself, then data centre networking, server and operating systems layers, application and service layers. We will see how the Internet today has become the global “security perimeter” and how to protect modern cloud workloads and corporate services.

How to protect yourself from the biggest Internet threats

Eliminating over-provisioning, allowing actual scale-to-zero and providing remarkable runtime performance. Join this session by Thorsten Hans and discover how you can build Serverless workloads using Spin and run them on different platforms, including Kubernetes, with open-source SpinKube.

Fast, Secure and Dense: Finally Serverless with WebAssembly

Serverless

Unlike rigid rulebooks, these frameworks establish core principles that guide decision-making throughout the AI lifecycle to address the unique challenges posed by different AI systems.

Several prominent examples of principles-based frameworks exist. The European Union's Ethics Guidelines for Trustworthy AI, the Bletchley Declaration, SR 117, and ISO/IEC 42001 are a few frameworks that provide a comprehensive set of principles for organizations to manage AI throughout its lifecycle.

The principles-based approaches provide a strong foundation for navigating the complexities of AI development and implementation. As AI technology continues to evolve, these frameworks can be revisited and refined to address new challenges. By focusing on core ethical principles, they ensure that AI development remains responsible and human-centric.

Principles-Based Framework for AI Governance

Big Data

Ethics

Efficient CDR strategies are challenging for several reasons, including cloud complexities, insufficient expertise, and cloud misconfiguration. These challenges often lead to blindspots; some cloud attacks are undetected, leading to successful compromises. Furthermore, the ephemerality of cloud resources requires continuous assessment, validation, and configuration of CDR to align with the evolving threat landscape.

Security Chaos Engineering (SCE) addresses these challenges by empirically evaluating security controls to gain evidence about effectiveness via quick feedback loops. This talk provides practical steps based on a hybrid CDR system consisting of AWS GuardDuty, AWS Detective, and Datadog Cloud SIEM. The talk demonstrates how CDR systems can miss malicious attack patterns including those defined in the MITRE ATT&CK library.

Optimizing Cloud Detection & Response With Security Chaos Engineering

During this session, I will guide you through the key considerations, strategies, and best practices to ensure a successful and seamless transition. From assessing the compatibility of your legacy application with a cloud-native environment to refactoring and rearchitecting for optimal performance, we will explore the crucial steps to take on this migration journey.

You'll gain valuable insights into the benefits of leveraging K8s and cloud-native principles, such as scalability, resiliency, and agility, to unlock the full potential of your legacy application. We'll discuss techniques for containerizing your application, orchestrating it with K8s, and leveraging cloud-native services to enhance functionality and streamline operations.
Additionally, we'll address the potential challenges and pitfalls you may encounter during the migration process and provide practical tips to overcome them. Whether it's handling data migration, ensuring security and compliance, or managing dependencies, we've got you covered with proven strategies and real-world examples.


Porting My Legacy Application to a Cloud Native Architecture

Unfortunately, research has shown that uneven communication among a team is an indicator of lower performance. Even individual IQ of team members has less impact on team performance than how well the team communicates! Regardless of what technical improvements we strive to make as a team, our performance will suffer if we fail to learn how to communicate effectively as a single unit.

I'll cover some reasons why some of us talk much more or less than others on our teams, as well as the effects that can bring. From my experience as a developer and a coach, I'll also go over some practical actions to take to encourage all individuals to share their opinions, and why it's beneficial for the entire team when that happens, regardless of each individual's role.

Hearing and Being Heard - Getting the Entire Team to Speak

All of this can add up to a big performance or stability problem, especially at scale... With an understanding of what happens under-the-hood, and the tools available to help, this doesn't have to be the case!

This session will dive deep into common C# pitfalls and how to avoid them, covering: enumeration, deferred execution, casting and boxing, string concatenation, statics and object disposal, and reducing allocations. We'll explore how methods like ToList() and ToArray() to work internally, and how they are often misused alongside the convenience of features like Linq to create serious inefficiencies.

Importantly, let's learn how to diagnose and fix performance issues when they do occur – with the help of some widely available tools to help identify inefficient code; directly within Visual Studio, with external tools like DotTrace or ANTS Profiler, with Open Source tools like BenchmarkDotNet, and even cloud tools like Application Insights.

Finally we will discuss how to adapt processes to help prevent issues in the first place, measuring and tracking performance improvements as part of development cycles, and convincing teams to treat performance with equal importance as features.

Everyone will leave with knowledge of how to optimise their code in a meaningful way!

Writing (in)efficient C#

For the past few years, I've been so preoccupied with whether or not some of the things I'll show you in this session could happen that I didn't stop to think if they should. I call them "Cursed C#."

Now, will you learn something you should apply to your day-to-day job? Probably not. Will you question your knowledge of the language you've been using for years? Absolutely. Will you return to your job on Monday trying to apply some of the practices you'll see in this session, even though I was clear that you shouldn't do that? There is no question about it. Join me anyway; it will be fun.

Cursed C#

At one end of the scale, volunteers use free software to resurrect old laptops, turning e-waste into useful tools they can donate to worthy causes. At the other end of the scale, tech giants use free software packages to create products which generate millions of dollars in profits every year - but when the creators of those packages try to recoup even a tiny part of that revenue, social media goes into an angry meltdown.

Join Dylan Beattie for a look at the past, present, and future of free software. We'll talk about the history of the free software movement, from MIT's Artificial Intelligence lab, to the shareware and public domain movement of the 1980s, to the era of GitHub and package managers. We'll explore why people choose to give their code away for free in the first place - and what happens if they change their mind. We'll talk about licences and legalities, we'll learn about some of the weird and wonderful edge cases that free software has created over the years, and we'll ask the question: is a truly sustainable open source ecosystem possible, and if so - what might it look like?

Open Source, Open Mind: The Cost of Free Software

In this talk, I’ll argue that retrying things actually does make a lot of sense, and is in fact key to improving the resilience of a distributed system. Along the way, I’ll explain the importance of timeouts, retry limits and knowing when giving up *does* make sense. I’ll also show how retries can be made safe (and help avoid draining your bank account), and perhaps we’ll get to examine that Einstein quote in a bit more detail…

Definition Of Insanity - Timeouts, retries, and idempotency

I re-entered the workforce as a new parent during the pandemic, combined with a relocation from London to Portugal all whilst getting used to a completely new life. After banging my head against the wall – repeatedly! I realized I wasn't going to get there without a system and tools to support me along the way.

It doesn't matter if you are an engineer, engineering manager or a CTO or even if you don't have kids! This session is for everyone!

In this session, I will share what I have learned, which tools worked and how I helped and learned from managing others through similar journeys across different cultures and countries with different realities and socio-economic factors. More and more, we are working in remote geographically distributed teams composed of in-house, outsourcing, nearshore people with big diversity; the pace increases and working environments become more and more impersonal.

It is important to raise awareness of the challenges, pain and dilemmas many of us deal with as new parents, the skills we learn and how our view of the world changes. We will go through what that looks like biologically, and the different phases one goes through from when a baby is born, through the joys of joint parental leave, maternity leave and workforce re-entry.
Leave this session with some memory tags on how we can support parents as an organization, as managers, as co-workers and ultimately as humans.

Re-entering the Workforce: Parenting Edition

Part 2/2: Dapr workshop: build microservice applications the easy way 

Prerequisites for the session are a local git installation, a text editor, and a free GitHub account.

Part 2/2: Deep dive into git

Part 2/2: Developing for the Apple Vision Pro

Keynote: Tidy First? A Daily Exercise in Empirical Design

Software Design

We will start the session by explaining the differences between distributed databases and centralized databases. We will compare indexing, stored procedures, partitioning, constraints, and scaling in these two great products. Next,
We will explore the available tools and languages to query and maintain the Azure Cosmos DB. Finally, we will compare the query optimization engine and execution plans between the two database engines.

This session will help you to understand and make the right decision for your upcoming cloud projects.

This session brings SQL Server and Azure Cosmos DB side-by-side and compares the two products in detail.

SQL Server vs Azure Cosmos DB

Database

Talk (100 min)

NDC Party: The Phil Nash Karaoke Party

In the first edition of this talk, I focused on the human factor of aviation disasters. An important element of both software engineering and aviation. But that is just the tip of the iceberg.

In this talk, I will go deeper into the technical oddities of some of the most famous aviation disasters. Buckle up for more case studies, more geeky stuff, and yeah, also some more human stuff.

We will cover
- Most common causes of aviation disasters and how that has changed over time
- Redundancy in systems
- Deadly UX
- Project failures and (wrong) incentives

Despite the subject matter, this talk is not doom and gloom. It is a practical look at the methods and insights that almost 100 years of investigating commercial aviation disasters can teach us as software engineers.

Mayday Mark 2! More Software Lessons From Aviation Disasters.

Design

Our comprehensive workshop is designed to assist new and emerging tech leaders in understanding their new roles and gaining the skills to make them confident, happy and effective leaders.

Less stress, more confidence: Focus on what you need to do by learning how to build trust and relationships, delegate work, empower others, and influence stakeholders whilst balancing strategic business and engineering objectives.

Lead with more ease: Know how to overcome challenging situations, difficult conversations and tasks with frameworks, worksheets and algorithms.

Progress your career: Invest in yourself with leadership skills that will help you bridge the gap between leading the tech and leading the people. It’s what you need to keep progressing in your career!

Participants can anticipate walking away with a rich repository of knowledge, tips, worksheets and practical strategies to embark on their leadership journey.

Leadership Blueprint: Delve deep into understanding leadership, touching upon themes such as emotional intelligence, influential communication, and resilience building. Build out your own "Leadership Blueprint" that allows you to understand the type of leader you want to be.

Learn Specific Skills: Master the strategies to navigate conflicts constructively, communicate to non-technical audiences, influence stakeholders and build trust with your team.

Personal Development Plan: Develop a personalised Leadership Blueprint that mirrors your leadership style, helping you to carve a path that is both rewarding and aligned with your strengths.

Access to the Tech Leaders Launchpad Online Foundations Course: Participants also get access to the online learning platform - Tech Leaders Launchpad - and free enrolment in the “Online Foundations Course” with an additional 8 hours of self-paced learning content.

Tech/Team Leads: Learn to build trust and manage your team and yourself. Foster more collaborations across different teams and disciplines, and confidently communicate tech to non-tech audiences.

Principal & Staff Engineers: Learn to build strong relationships and trust to lead. Influence and set the technical direction for your teams, and nurture team talent through mentoring and knowledge sharing.

Engineering Managers: Learn to delegate work and empower others, influence stakeholders whilst balancing strategic business and engineering objectives, and effectively guide your team towards a shared vision and goal.

The Workshop is led by Andrew Murphy, a former software developer who has held various leadership positions in consultancies and SaaS companies like Linktree.

With the right support, Andrew believes that everyone can become the leader they want to be, which is why he now focuses on teaching those skills via his company Tech Leaders Launchpad.

By sharing his experiences, tools, and techniques, Andrew equips emerging and new tech leaders with the necessary skills for success in the modern workplace.


Part 1/2: From Engineer to Leader: A Workshop for First-Time Tech Leaders

Through the lens of microwave ovens, we cover: (1) how minimalist interface design conflicts with engineering and business constraints, (2) how/why to measure customer latency from initial desire to end results, (3) how to identify and expose "essential" variables in systems, and (4) common tools/patterns for implementing minimal interfaces.

NDC Party: A History of Knobs on Microwaves

In this session, you'll learn all about that and more with tips taken from building event driven systems in the real world. Starting from why, understanding what and plenty of practical things you can take away and use in your own applications. From the simple, through to some advanced integration patterns that this architecture style unlocks. to improve the resilience, extensibility and scalability of your systems.

So You Want to Build An Event Driven System?

How can we destroy those heroes in a way that every supervillain on every film has dreamt about every day?

This requires discipline, dedication and an elaborated plan.
How can you get those Heroes wishing they never used a keyboard?
Join this talk and become the real nemesis of every hero!

From Hero to Zero: practical guide to destroy your best employees

With the incredible power of Service Workers, we can provide a fast and reliable experience for all your users. Forget about Mobile first or Content first; let’s go Offline first!

In this talk, Rowdy will look at different caching strategies to boost the performance of your website and how to deal with offline situations using the Cache API and Fetch API. As a bonus, these techniques will save your users’ valuable bandwidth and battery life as well.

Offline first!

JavaScript

What makes a good leader? What makes a bad one? Explore attributes of influential leaders in this fun and collaborative, fully hands-on workshop. This creative session invites you to translate deeper understanding of behaviour traits into leadership contexts.

This is for people interested in discovering their leadership styles and what they have in common with influential leaders from movies, books or the real world!

Leia VS Galadriel: Exploring your inner leader

Sit back and enjoy an action-packed 40 minute journey through the first experiments with computers composing music, vintage chip music on vintage computers, endless soundscapes performed by algorithms, rockstars’ secret lives as video game avatars and artificial intelligence creating artificial artists.

This is a journey that transcends time, resonating with the harmony of code and the symphony of innovation.

NDC Party: Highscores: A History of Computer-Programmed Music

In this talk I'll discuss some of some notable examples in both the aviation and security industry and what we can learn and take away from that as security professionals.
Note: You don't have to be an aviation geek to enjoy this talk, promise!

Nerds on a plane: what we can learn from the aviation industry

Ready to dive into the world of AI and Knowledge Graphs? We'll learn the technical side of these algorithms, their real-world applications, and how to overcome their limitations. We'll also explore current lines of research to combine them with LLMs. Join us to learn about the future of AI and how you can use it to your advantage!

The Power of Knowledge Graphs and AI: A New Era for Developers and Data Scientists

We'll begin by seeing how easy it is to install .NET 8.

Then we'll see how we've connected up the various components to our Raspberry Pi.

Next we'll spin up a console application to explore how we can control the GPIO on the Pi.

We'll then examine the code to start moving the connected servos for our Raspberry Pi based Robot Arm.

Next we'll look at a simple Blazor and SignalR app to control our robot remotely!

Finally we'll have a look at how we can use an Meta Quest 3 to interact with our Robot Arm in VR!

This session will appeal to all knowledge levels. A working knowledge of programming will help, but all the code will be shared on GitHub!

Building a Robot Arm with .NET 8, Raspberry Pi, Blazor and SignalR

Embedded

3d Modeling

In this session you'll learn various techniques to implement idempotency for batch and streaming pipelines. They'll address the issues such as job retries, late data arrival, or yet data backfilling due to a code regression. The solutions are technology-agnostic but to simplify the understanding, you'll see them applied to Apache Kafka, Apache Spark, and Apache Airflow.

After the session you should be able to better understand the challenges in creating resilient data pipelines, so that the failures will be less scary!

Embrace the failure, stay idempotent

In this workshop you're going to see two stream processing models in action. The first is the micro-batch one that should help you enter the streaming world and see basic aspects the easy way. The second is the dataflow model that has nothing to do with batch processing and therefore, requires a bigger mind shift effort. Both parts will be covered with Open Source data processing frameworks, Apache Spark for the micro-batch part, and Apache Flink for the dataflow model.

By the end of this workshop you, as a prior batch processing person, should better understand the streaming world and be able to write your first jobs by taking all gotchas into account.

Part 1/2: Stream the word with Apache Flink and Apache Spark

REST, gRPC, GraphQL and Asynchronous Messaging are all patterns of communication between distributed systems. What are the core concepts behind these patterns? Do you know what problems they try to address? What about the use cases? Join my session to find out the answers to these questions!

REST, gRPC, GraphQL or Asynchronous Messaging

At the same time, despite their obvious strengths, these models suffer from certain limitations, which can make it difficult to integrate them directly into our custom business workflows or applications. In particular they are confined to the data they were originally trained, so they would not know about specialized domains or our own internal data, and they are prone to hallucination (“making stuff up”).

However, it's possible to extend their reasoning to any custom, business- or domain-specific data set, opening avenues for more personalized, insightful and reliable integrations.
This session focuses on GPT models from OpenAI and explores the essential architectural components within Azure that support such integrations, outlining how to use these models in our own products and services.

LLMs with your own data using Azure OpenAI

Incidents like this proof that application security is not just security testing before you ship your software or architecture reviews. Security must be baked into your development process and if must span the entire software supply chain.

In this talk you’ll learn how you can integrate security into your complete development process:
-	Secure development environments
-	Secret scanning and secret rotation
-	Dependency management and software composition analysis (SCA)
-	Manage your software supply chain with Dependabot
-	Find XSS, SQL injection, and memory leaks
-	Static and dynamic security testing (SAST and DAST)
-	Hunt for vulnerabilities writing your own CodeQL queries

The talk is for everyone that is interested in application security – developers as well as DevOps engineers.

NDC { Porto }

Agenda

09:00 - 10:00 (UTC+01)

Keynote: Tidy First? A Daily Exercise in Empirical Design

Kent Beck

10:20 - 11:20 (UTC+01)

What's new in .NET 9 & C# 13

Filip Ekberg

SQL Server vs Azure Cosmos DB

Hasan Savran

How to fall in love with TDD

Gui Ferreira

Sphere of Control: Techniques to Tackle Tech Debt Today

Dustin Thostenson

Fast, Secure and Dense: Finally Serverless with WebAssembly

Thorsten Hans

Part 1/2: Dapr workshop: build microservice applications the easy way

Edwin van Wijk

Sander Molenkamp

11:40 - 12:40 (UTC+01)

Cursed C#

Nick Chapsas

Less is more—a build pipeline for the modern age

Adam Ralph

👍 Looks GREAT To Me: Getting Past Bare Minimum Code Reviews

Adrienne Braganza Tacke

Porting My Legacy Application to a Cloud Native Architecture

Andrei Pokhilko

Cypress, Playwright or Selenium: choosing the right testing tool

Soumaya Erradi

Part 2/2: Dapr workshop: build microservice applications the easy way

Edwin van Wijk

Sander Molenkamp

13:40 - 14:40 (UTC+01)

An Introduction to Residuality Theory

Barry O'Reilly

Turbocharged: Writing High-Performance C# and .NET Code

Steve Gordon

Optimizing Cloud Detection & Response With Security Chaos Engineering

Kennedy Torkura

Data modeling strategies in NoSQL databases

Hasan Savran

Part 1/2: Deep dive into git

Michael Kaufmann

15:00 - 16:00 (UTC+01)

Platforms: Build abstractions, not illusions

Gregor Hohpe

Definition Of Insanity - Timeouts, retries, and idempotency

Sam Newman

Thinking Functionally with C#

Simon Painter

How to protect yourself from the biggest Internet threats

Ignat Korchagin

Hearing and Being Heard - Getting the Entire Team to Speak

Daniel Ward

Part 2/2: Deep dive into git

Michael Kaufmann

16:20 - 17:20 (UTC+01)

Writing (in)efficient C#

Callum Whyte

How hacking works - Web edition

Espen Sande-Larsen

The Future of Cloud-Native Application Development with Radius

Loek Duys

Re-entering the Workforce: Parenting Edition

Nisha Chaganlal

Part 1/2: Developing for the Apple Vision Pro

Taylor Troesh

17:40 - 18:40 (UTC+01)

Open Source, Open Mind: The Cost of Free Software

Dylan Beattie

Test-Driven Leadership: Crafting Testable Strategies

Andrew Murphy

From Dormant to Dynamic: Upcycling Documents with AI

Bronwen Zande

Principles-Based Framework for AI Governance

Mithun A. Sridharan

How Much Resources I Need?.. an Approach to Writing the Infra Code

Roman Mazur

Part 2/2: Developing for the Apple Vision Pro