This event is in collaboration with The Yorkshire Cyber Security Cluster.
Speaker
Ben Sloan, Lead Engineer in the UK Civil Service, helping the government to build interesting things at scale.
Agenda
5:30pm - Light refreshments
6:30pm - Talk starts
7:30pm - Event ends
Synopsis
Have you ever upgraded a nuget package, then later found out that it almost led to the breach of millions of records of customer data? I have, and I’d like to tell you about it... Welcome to ‘The domino effect’.
This is an experience report / postmortem detailing how updating one of the most popular and common nuget packages in the world (probably in use in almost every .net project everywhere - Newtonsoft.Json) sparked a somewhat unpredictable chain of events which ultimately led to a customer database of millions of customers at a major e-commerce retailer becoming public, which could have been a major incident impacting peoples’ lives.
A thorough forensic investigation followed, and fortunately we were able to prove no data had been stolen or lost but only just by the skin of our teeth. This was the near-miss of all near-misses.
This talk looks at the ‘domino effect’ that happened from updating the package to data being left on a public and unprotected instance for almost two weeks.
This event is in collaboration with The Yorkshire Cyber Security Cluster.
The Yorkshire Cyber Security Cluster is an initiative created as part of the UK Cyber Security Forum to help businesses and organisations across the region to collaborate and build a stronger standard of cyber security as part of a knowledge exchange collective. The Yorkshire Cyber Security Cluster brings together recognised cyber security experts, a selection of academic institutions, charities, local bodies and the police force who are all, working together towards reducing cybercrime within Yorkshire and the surrounding regions.
Our events are for adults aged 16 years and over.
BCS is a membership organisation. If you enjoy this event, please consider joining BCS. You’ll be very welcome. You’ll receive access to many exclusive career development tools, an introduction to a thriving professional community and also help us Make IT Good For Society. Join BCS today.
For overseas delegates who wish to attend the event, please note that BCS does not issue invitation letters.
COVID-19
BCS is following government guidelines and we would ask attendees to continue to also follow these guidelines. Please go to https://www.nhs.uk/conditions/coronavirus-covid-19/ for more information, advice, and instructions.
This event is brought to you by: BCS South Yorkshire branch
