The video on-demand of this session is available to logged in QCon attendees only. Please login to your QCon account to watch the session.


Securing Java Applications in the Age of Log4Shell

Due to unforseen circumstances, the speaker is no longer available for a Q&A. Please post any questions you have in the Announcement Slack channel.

On December 10th 2021, a new critical vulnerability, Log4Shell, was publicly disclosed and make global headlines. It impacted a wide number of applications on the internet, allowing attackers to remotely execute code within vulnerable applications worldwide.

In this session, we'll briefly cover what caused the issue, how it can be exploited, and most importantly, how it can be mitigated through upgrades, or defended against in WAF configurations and more. 

The majority of the session will look at how we can be more proactive and defensive in our decisions for future Log4Shell like scenarios. We'll take a look at where risk is being introduced into our applications and pipelines, and how we can identify and reduce this risk up front, as well as be better prepared to react to these types of incidents in future.


Simon Maple

Field CTO @snyksec

Simon Maple is the Field CTO at Snyk, a Java Champion since 2014, JavaOne Rockstar speaker in 2014 and 2017, Duke’s Choice award winner, Virtual JUG founder and organiser, and London Java Community co-leader. He is an experienced speaker, having presented at JavaOne, DevoxxBE, UK, & FR,...

Read more


Wednesday May 11 / 12:30PM EDT (50 minutes)


Modern Java


JavaApplication SecuritySecurity

Add to Calendar

Add to calendar


From the same track

Session + Live Q&A Java

Deterministic, Reproducible, Unsurprising Releases in the Serverless Era

Wednesday May 11 / 09:00AM EDT

Serverless has many advantages, to reap the benefits from this recent paradigm your application must tackle new challenges. Testing and traceability introduce some new  considerations that may take by surprise even the most seasoned Java developer.In this session we will explore...

Ix-chel Ruiz

DA, Senior Software Developer @jFrog

Session + Live Q&A Java

Project Loom: Revolution in Java Concurrency or Obscure Implementation Detail?

Wednesday May 11 / 10:10AM EDT

Loom’s promise: simplify concurrency the way garbage collection simplified memory management. It became transparent and almost forgettable. It's an effort to bring lightweight threads to the JVM. Such threads have low memory and scheduling footprint so that you can create millions of...

Tomasz Nurkiewicz

Java Champion and CTO @DevSkiller

Session + Live Q&A Java

Staying JDK: Current in Production

Wednesday May 11 / 11:20AM EDT

At the time of Qcon London, Java will have been on a fast release cadence for almost 5 years. This talk addresses the less often mentioned aspect: adopting JDK upgrades.  I will discuss different perspectives towards Java upgrades and possible migration paths. How to plan and execute an...

Andrzej Grzesik

Platform @RevolutApp

View full Schedule