Cyber security, AI security, AppSec, DevSecOps, Cloud security,
Deception defence, Hacking, Exploitation
AI Security#
| Location |
Date |
Presentation Title |
| 🇩🇰 FirstCon |
2025 |
Beyond the Hype: How Large Language Models Really Help (and Hinder) Vulnerability Remediation |
| 🇵🇱 Code Europe |
2025 |
Hacking LLM applications: trends and live secure coding lessons |
| 🇦🇺 Programmable Sydney |
2025 |
Jailbreaking and Protecting LLM Apps: A Public Wargame Experiment |
| 🇺🇸 Black Hat USA |
2025 |
AI Wargame |
| 🇸🇬 Black Hat Asia |
2025 |
AI Wargame |
| 🇺🇸 TechBash |
2025 |
LLM (in)Security Workshop - Find, Hack and Fix LLM Apps |
| 🇺🇸 Black Hat USA |
2024 |
AI Wargame |
| 🇸🇦 Black Hat MEA |
2024 |
Prompt injection and secure prompt engineering |
| 🇳🇿 OWASP AppSec Days |
2024 |
Jailbreaking and Securing LLM Apps: Lessons from an Online Wargame Experiment |
| 🇯🇵 FirstCon |
2024 |
AppSec & Secure AI Challenges |
| 🇦🇺 AISA CyberCon |
2024 |
Securing and attacking LLM-Based apps |
| 🇸🇬 OWASP AppSec Days |
2024 |
LLM Security Is Broken: Data Collected From an AI Wargame |
| 🇨🇦 Black Hat SecTor |
2024 |
AI Wargame |
| 🇬🇧 Black Hat EU |
2024 |
AI Wargame |
| 🇸🇦 Black Hat MEA |
2024 |
AI Wargame |
| 🇸🇬 Black Hat Asia |
2024 |
AI Wargame |
AppSec, DevSecOps & Secure Coding#
| Location |
Date |
Presentation Title |
| 🇸🇬 OWASP AppSec Days |
2025 |
40,000 CVEs and Counting: The State of AppSec in 2025 |
| 🇩🇰 FirstCon |
2025 |
AppSec & DevSecOps Challenges |
| 🇦🇺 NDC Melbourne |
2025 |
Proactively defending your software |
| 🇺🇸 DEF CON AppSec Village |
2025 |
Web 3 and AppSec Challenges |
| 🇺🇸 DEF CON AppSec Village |
2024 |
Secure Coding Wargame (Fix The Flag) |
| 🇯🇵 FirstCon |
2024 |
Challenges in Establishing Secure Software Development Culture |
| 🇺🇸 DEF CON AppSec Village |
2023 |
AppSec Wargame |
| 🇺🇸 DEF CON AppSec Village |
2023 |
Secure Coding Attack and Defence Challenge (Fix The Flag) |
| 🇨🇦 FirstCon |
2023 |
AppSec & DevSecOps Challenges |
| 🇨🇦 FirstCon |
2023 |
How to Create a Secure Programming Culture Among Engineering Teams |
| 🇬🇧 BlackHat EU |
2023 |
Build security unit and integration tests like a hacker |
| 🇨🇦 BlackHat SecTor |
2023 |
Security Attacks as Software Tests: How to build security unit tests |
| 🇦🇺 NDC Melbourne |
2022 |
Fuzzing Cloud Native Apps: Zero to Hero |
Hacking & Exploitation#
| Location |
Date |
Presentation Title |
| 🇭🇺 BsidesBudapest |
2020 |
Immune your Javascript Programs Against Modern Vulnerabilities |
| 🇦🇺 SyPy Sydney |
2018 |
Member-Oriented Exploitation Technique in Python 2.x and 3.x |
| 🇦🇺 ReactJS Sydney |
2018 |
Client-Side Template Injection in AngularJS 2 |
| 🇦🇺 AusCERT |
2016 |
The trade-off between UX vs Security |
Deception Defence#
| Location |
Date |
Presentation Title |
| 🇭🇺 BsidesBudapest |
2017 |
Deception defence 101 - a platform at low cost |
| 🇸🇮 BsidesLjubljana |
2017 |
Deception defence 101 - a platform at low cost |
| 🇦🇺 Csides Canberra |
2017 |
Deceptive defence |
| 🇳🇱 HITB, Netherlands |
2015 |
Uncovering Secret Connections Among Attackers Using Network Theory and Custom Honeypots |
Cloud Security#
| Location |
Date |
Presentation Title |
| 🇦🇺 AISA Sydney |
2012 |
Know who targets your public facing infrastructure and give yourself a second chance even if your servers are not patched |
| 🇦🇺 ISACA Perth |
2011 |
Don’t let your Cloud turns Dark |
Machine Learning#
| Location |
Date |
Presentation Title |
| 🇺🇸 CEAS |
2010 |
Rule-Based On-the-fly Web Spambot Detection Using Action Strings |
| 🇦🇺 AINA |
2010 |
Web Spambot Detection Based on Web Navigation Behaviour |
Honeypot & Spam#
| Location |
Date |
Presentation Title |
| 🇯🇵 PRIMA |
2009 |
HoneySpam 2.0: Profiling Web Spambot Behaviour |