Selected Past Talks
This is a curated archive, not a complete speaking history. Each entry is backed by an official conference page, chapter page, or direct recording link.
June 2, 2025
Using AI to write Secure React.JS code
A deep-dive lecture on improving AI-assisted code generation for React so the output is not just functional, but structurally safer and more reviewable.
June 6, 2025
Secure Coding Workshop
A full-day hands-on workshop covering injection, XSS, authentication weaknesses, insecure dependencies, secure APIs, file upload risk, and AI-assisted code generation in practice.
May 29, 2025
Leveraging AI for Secure React Development with Effective Prompt Engineering
A conference session on teaching AI coding assistants the React security rules they need so generated code is less fragile, less unsafe, and easier to ship responsibly.
June 3, 2024
AI Security: Essentials to Advanced
A concise map of AI security issues spanning LLM risk, reliability, privacy, regulation, threat modeling, and the operational decisions that shape safe deployment.
June 4, 2024
Building Secure ReactJS Applications
A React-focused security lecture covering XSS, props, JSON embedding, CSS, template injection, SSR, and the framework-specific places developers still get cut.
June 14, 2023
Third-party library security management
A practical dependency-management talk on reducing library sprawl, vetting what you import, and keeping components current enough to avoid self-inflicted supply-chain risk.
June 14, 2023
The unabridged history of application security
A keynote that argues AppSec history is not a story of endless failure, but of slow, measurable improvement in standards, defaults, and defensive engineering.
August 2023
Architecting Fortresses: ReactJS Security
An advanced React security talk on client-side trust boundaries, XSS defense, component attack surface, template injection, and server-side rendering concerns.
November 2019
The Unabridged History of Application Security
A well-known keynote tracing AppSec from the early era of plaintext passwords and poor defaults to the present, with the core message that the industry is improving faster than many practitioners admit.