It sounds too good to be true. However, few practices have the label "Transformational" used as often as TDD.

If TDD is so good, why is it not widely adopted?

Even though TDD is a simple concept, it is hard to master.

But don't worry about that. This workshop will take you there.

At the end of this workshop you will be able to:

Understand the steps involved during a TDD session.

Drive the development using automated tests.

Discover improved confidence and increase in development speed by writing tests first!

Use refactoring techniques to improve code safely.

Write long-lasting tests resilient to changes.

Address the challenges of applying TDD in the context of a Team.

Confidently evolve and maintain legacy applications using TDD.

While the course is hands-on and interactive, you will also learn the TDD foundations.

This workshop is for a C# Software Developer who wants to set up his skills. If you identify with that, as far as you have basic knowledge of C# .NET and Testing, you are ready for this workshop.


You can expect two days of hands-on and collaboration moments.

I'm a strong believer you should learn using your favourite day-to-day tools. So, in this workshop, you only need:

I risk saying that at the end of this, you might become test-addicted.

2 Days

Mastering Test-Driven Development (TDD) in C#

Testing

Software Design

This workshop is here to give you the skills you need to make your APIs secure. We're going to think like an attacker to test APIs and like a defender to figure out the best ways to protect them. With deep-dive talks, real-world demos, fun quizzes, and hands-on labs, you'll learn how to lock down your APIs.
During this hands-on training, we'll explore:

The security model of API-based web applications

Recognizing and addressing authorization failures

Understanding Broken Object Property Level Authorization (BOPLA)

Fixing Broken Object Level Authorization (BOLA)

Testing the security of APIs that use JWTs

Best practices for making JWTs secure in modern APIs

Identifying, exploiting, and fixing Server-Side Request Forgery (SSRF) issues

Understanding Cross-Origin Resource Sharing (CORS)

Configuring secure CORS policies for various use cases

Tracking user authentication securely with sessions or tokens

Relying on OAuth 2.0/2.1 for securing APIs

Q & A throughout the workshop to clear up any doubts


This workshop is about more than theory. We're all about giving you practical security tips you can use right away as an API developer. We dig into the root causes of API threats and how to handle them. We don't just skim the surface of problems and solutions - we get into the why's and how's, looking at common fixes, why some fall short, and which ones are currently the best way to go.
By the end of this workshop, you'll be up-to-speed on the best practices for API security. You'll also leave with a handy list of steps to check and boost the security of your applications.




This training is perfect for developers and architects who work a lot with APIs. If your role involves building, testing, or designing modern apps, this workshop will give you a thorough, up-to-date understanding of the best ways to keep things secure. We'll often use NodeJS, Flask, and Spring Boot in our code examples and demos, but you'll easily be able to apply what you learn to other languages and frameworks.




These testimonials from previous workshops give you a good idea of what to expect:

Trainer is great and an expert in the domain. All of the topics are very relevant. Practical examples for most of the topics. Excellent communication and addressing of questions.

Even though the topic is broad, there was no single moment where my focus went astray. Philippe talks in a way to keep you interested to listen to him.

I liked the the pleasant and relaxed way of speaking and the fresh style of presentation of this kind of dry stuff :)

Philippe is a friendly and knowledgable trainer and delivered an interesting course that was well presented. Questions were answered promptly and in a detailed way.


To participate in this training, you should have some experience with building API-based applications. Knowledge of application security can be helpful, but is not required.




To participate in the lab sessions, participants need a computer with a full-featured modern browser installed (preferably Chrome).


Bulletproof APIs: Hands-On API Security

Security

Pods, services, deployments, and replicas

ways to scale and expose/isolate your containers

Best practices for building at cloud scale

Tips & Tricks for leveraging Docker and Kubernetes

We'll look at the commands and ecosystem around building infrastructure as code, local and cloud clusters, and best practices with containers. Come see why devs and ops love Kubernetes.

 running on your machine in Kubernetes mode.

Teach you the skills to leverage Docker and Kubernetes in your environment today.

Why are we learning Docker too? The Kubernetes story begins with "so you've got a Docker container ...". Docker is how we build the images; Kubernetes is how we run these containers at scale.


Because Docker leverages the OS's virtualization technologies, the install requirements for Docker are 

 specific. Ensure you exactly meet these specs to get the most from our time today:


- 2010 or newer model with Intel's MMU virtualization
- OS X 10.15 or newer


- 64-bit Windows
- Windows 10 version 2004 or better
- Access to your machine's BIOS to turn on virtualization
- Administrator access to run Docker Desktop and a console as Admin


-64-bit Linux these versions or better: Ubuntu 14.04, Debian 7.7, CentOS 7, or Fedora 24 or better

Kubernetes Hands-on Workshop

Kubernetes

In this workshop, we will design an API with respect to the non-functional requirements that are paramount to any serious application running in production. For this, we will use .NET 8.

We will cover the design process of several API types, including REST, gRPC, GraphQL & OData. We will then transition towards messaging, always with an eye on the Cloud.

By the end of the workshop, you will know how to enforce architectural decisions and what it means to have an API that is evolvable, reliable and ready to scale.


In this section we delve into intricacies of REST-based APIs, the client/server nature of it and we explore the decision-making process behind choosing REST, by offering a detailed guide to the API design process, documenting and the most common usage scenarios.   

Media-type selection, design & custom media types


This section we cover gRPC and we outline the RPC API design process. We start by exposing and defining operations, particularities of consuming these APIs and document them. This succinctly summarizes the key components covered in this part, providing an overview of the gRPC protocol, considerations for RPC, and the step-by-step process for designing RPC APIs.


In this section we cover the concept of a Query-Based API and we explore OData and GraphQL


In this section we learn the messaging fundamentals and we deep dive into a new world that covers queues, topics, message brokers and different tools. While we are here we will have a look at what AWS and Azure has to offer in order to understand what to use.

Part 3 - Addressing non-functional requirements

Performance, Optimization and Scalability

difference between APIs and microservices.

moving from a monolith to a microservice architecture

The workshop targets .NET Software developers that want to have a more architecture-focused

view over designing APIs or simply want to understand what are the communication patterns, and the best practices for APIs in distributed architectures.

understand which APIs are best suited for which scenarios

understand are the non-functional requirements needed for APIs

design and build APIs that are ready for production

address the most important “ilities” of any API

Designing APIs

The workshop is interactive, with hands-on exercises as well as presentation of design techniques, principles, and a lightweight process for incorporating design into development. You'll learn how to create your team's customized recipe for great design, choosing the techniques that work well for your circumstances.

The focus is on interaction design, design thinking techniques, and innovation, not aesthetics and layout. We’ll discuss how to facilitate design meetings, reach group decisions, probe user work and task flows, fit design tasks to those flows, and use that understanding as a basis to foster innovation through better interactions with users. You'll help your team enter production coding with fewer blind alleys, backtrack, and rework. Some exercises will be in groups – bring others on your team if you would like to experience this workshop together.

Master Class: Design Thinking for Applications

Design

This workshop teaches advanced, cutting edge techniques based on ongoing research that are designed to identify and decrease risk, improve confidence in decision making and protect your architecture when the domain is characterized by uncertainty.

The workshop introduces ideas on the philosophy of architecture, forcing participants to think outside of the technology and relate decision making to markets, culture, economic and societal concerns. It teaches practical techniques in stressor analysis and the use of matrices to make component decisions and gives participants the chance to work with these techniques in labs and groups.

This workshop is suitable for senior developers who want a head start into the world of architecture, for teams embarking on large, risk filled projects, and for seasoned architects seeking new techniques. It has also been successful in unting teams around a common definition of architecture.

Concrete Complexity for Software Engineering

Modelling stress: socio-economic architecture

Contagion analysis and component decisions

Good understanding of software design. A laptop with Excel will be necessary.

NDC { Oslo }

Workshops

09:00 - 17:00 (UTC+02)

Master Class: Design Thinking for Applications

Billy Hollis

Mastering Test-Driven Development (TDD) in C#

Guilherme Ferreira

Kubernetes Hands-on Workshop

Rob Richardson

Advanced Software Architecture with Residuality Theory

Barry O'Reilly

Designing APIs

Irina Scurtu

Bulletproof APIs: Hands-On API Security

Philippe De Ryck