rico@komenda
$ ls ./talks --sort=date

Talks

Conference talks and workshops on application, cloud and AI security. Full speaker profile on Sessionize, slides on GitHub.

2026
5–6 Nov2026
πŸ‡ΊπŸ‡Έ OWASP Global AppSec USA 2026 Β· San Francisco
  • Hands-On AI Security Assessment with OWASP AISVS
    6 Nov Β· 10:30 Β· Workshop
    with Jim Manico
    The AISVS project leads walk through scoping an assessment, choosing verification levels and applying the requirements to LLM apps, agents and MCP-connected tools.
  • Security Chaos Engineering for AI Application Architectures
    5 Nov Β· 14:45 Β· Talk
    Applying chaos engineering to AI systems: experiments that mimic realistic failures and adversarial scenarios such as tampered data, prompt injection and degraded models.
  • OWASP AISVS: Bringing Order to AI Security Chaos
    5 Nov Β· 10:30 Β· Talk
    with Jim Manico
    Turning AI security into testable, verifiable requirements, and how teams can apply AISVS from design through production readiness.
29 Oct2026
πŸ‡ΊπŸ‡Έ OWASP LASCON 2026 Β· Austin
Builders & Breakers Part II: Securing Agentic AI After the Death of LLM Wrappers
with Javan Rasokat
8 Oct2026
πŸ‡¬πŸ‡§ AI Agent Security Summit Β· London
The Dark Side of Agentic AI: Adversarial Attacks at Scale
Where adversarial ML meets agent security: chaining evasion, poisoning and multimodal attacks across the agent stack, with a live demo against a document-processing agent.
24 Sep2026
πŸ‡©πŸ‡ͺ German OWASP Day 2026
OWASP AISVS: Bringing Order to AI Security Chaos
How a verification standard turns ad-hoc AI security into something systematic, measurable and testable across the AI lifecycle.
7 Aug2026
πŸ‡ΊπŸ‡Έ DEF CON 34 Β· Las Vegas
  • Trust No History: Why Every "Remembered" Interaction is a Potential Backdoor
    AppSec Village
    with Barno Kaharova
    As agents gain memory, their context becomes an attack surface: altered history, biased knowledge and dormant instructions that fire later. Why agent memory must be protected like critical infrastructure.
  • Defend zee clankers: OWASP AI Security Verification Standard (AISVS)
    Creator Stage
    with Jim Manico
    AISVS tour: structure, three verification levels, and how it relates to ASVS, NIST AI RMF and ISO 42001.
25–26 Jun2026
πŸ‡¦πŸ‡Ή OWASP Global AppSec EU 2026 Β· Vienna
  • Trust No History: Why Every "Remembered" Interaction is a Potential Backdoor
    26 Jun Β· 14:15 Β· Talk
    with Barno Kaharova
    How agent memory gets corrupted over time – rewritten history, biased knowledge, dormant instructions – and why it must be defended as critical infrastructure.
  • Hands-On AI Security Assessment with OWASP AISVS
    26 Jun Β· 13:15 Β· Workshop
    with Raza Sharif, Jim Manico, Otto Sulin & Russ Memisyazici
    Hands-on lab with the AISVS project leads: scope an AI security assessment and apply AISVS to LLM apps, agents and MCP-connected tools.
  • OWASP AI Security Verification Standard (AISVS)
    26 Jun Β· 10:30 Β· Lightning talk
    with Jim Manico, Otto Sulin, Russ Memisyazici & Raza Sharif
  • Builders & Breakers Part II: Securing Agentic AI After the Death of LLM Wrappers
    25 Jun Β· 10:30 Β· Talk
    with Javan Rasokat
    The follow-up to Barcelona: breaking and defending agentic AI – MCP, A2A, memory poisoning, tool misuse and goal hijacking – plus Zero Trust-style isolation, sandboxing and runtime plan validation.
2026
πŸ‡©πŸ‡ͺ OpenChain and Friends 2026
Inside the OWASP Top 10 for Agentic AI: The New Security Reality
2025
Oct2025
πŸ‡ΊπŸ‡Έ OWASP LASCON 2025 Β· Austin
  • Builders and Breakers: A Collaborative Look at Securing LLM-Integrated Apps
    with Javan Rasokat
  • The Model Context Protocol: Convenience meets vulnerability
25 Sep2025
πŸ‡©πŸ‡ͺ OWASP Stuttgart
All about MCP Security
Jul2025
πŸ‡©πŸ‡ͺ WeAreDevelopers World Congress 2025 Β· Berlin
Builders and Breakers: A Collaborative Look at Securing LLM-Integrated Apps
29 May2025
πŸ‡ͺπŸ‡Έ OWASP Global AppSec EU 2025 Β· Barcelona
Builders and Breakers: A Collaborative Look at Securing LLM-Integrated Apps
with Javan Rasokat
May2025
πŸ‡©πŸ‡ͺ JAX 2025 Β· Mainz
MLSecOps: Securing AI/ML Systems in an evolving landscape
Apr2025
πŸ‡©πŸ‡ͺ JavaLand 2025
Pentesting LLM-integrated applications
11 Feb2025
πŸ‡©πŸ‡ͺ OWASP Stuttgart
AI Security & Insights into OWASP Top 10 LLM
2024
Nov2024
πŸ‡©πŸ‡ͺ DevCamp Witt-Group 2024 Β· Weiden
  • Hidden dangers of language models: identifying and remedying code vulnerabilities
  • Mitigate GenAI risks with a Zero Trust approach
Sep2024
πŸ‡©πŸ‡ͺ MCTTP 2024 Β· Munich
Pentesting Large Language Models 101
Jun2024
πŸ‡©πŸ‡ͺ IT Security Summit 2024 Β· Berlin
  • Cloud Security Architecture
  • Real-world exploits and mitigations in LLM Apps
  • MLSecOps: Security of AI/ML systems
May2024
πŸ‡·πŸ‡΄ DefCamp Cluj-Napoca 2024
Step-by-Step: Application Security Architecture
May2024
πŸ‡©πŸ‡ͺ Magdeburger DevDays 2024
Who the f* is TLS?
Apr2024
πŸ‡©πŸ‡ͺ JAX 2024 Β· Mainz
The Future Of Application Security
Jan2024
πŸ‡³πŸ‡΄ NDC Security 2024 Β· Oslo
Hacked in hours: Red team assessments unveiling vulnerabilities
2023
May2023
πŸ‡©πŸ‡ͺ IT Security Summit 2023 Β· Berlin
  • Hacking a Kubernetes Cluster
  • DeepPhishing: Be the CEO
  • Kubernetes Cluster – but secure!
    Workshop
2022
Nov2022
πŸ‡©πŸ‡ͺ JavaScript Days 2022 Β· Berlin
Attack vectors in the frontend & how to prevent them