AI Workshop Duo

Threat Modeling with AI – Half-day Workshop

This workshop will introduce Security Professionals, Developers, Architects, and Product Managers to integrating AI assistance into their threat modeling workflows. Participants will learn how to leverage AI for diagramming, threat identification, and countermeasure recommendations to speed up threat model analysis. 

To bring these concepts to life, the workshop includes a guided case study on a Digital Wallet / Payment App. Participants will use AI tools to generate a data flow diagram, identify threats using STRIDE, propose mitigations mapped to industry standards, and summarize findings for business stakeholders. This integrated exercise provides an engaging, end-to-end view of how AI can support—but not replace—human judgment in threat modeling.

While participants should have a working knowledge of Generative AI and LLM concepts and tools (e.g., prompt engineering), no prior experience with threat modeling is required. 

Participants will earn 4 CPE credits for this workshop. 

Robert Hurlbut

Principal Product Security Architect and Threat Modeling Trainer at Toreon

Robert brings over 30 years of experience in secure coding, software architecture. Before joining Toreon, he started and led the threat modeling program at Bank of America and filled in a similar role at Aquia. He is passionate about helping teams identify, communicate, and understand threats and mitigations and enhance workload security through threat modeling.

Robert is a Microsoft MVP for Developer Security and an ISC2 Certified Secure Software Lifecycle Professional (CSSLP). He holds a Master of Science in Cyber Security from Southern New Hampshire University and is a Ph.D. candidate in Space Cybersecurity at Capitol Technology University.

Robert is co-author of the Threat Modeling Manifesto (https://www.threatmodelingmanifesto.org/), Threat Modeling Capabilities Model (https://www.threatmodelingmanifesto.org/capabilities), and co-host of the Application Security Podcast (https://appsec.buzzsprout.com/). A world-renowned expert in threat modeling, he frequently contributes thought leadership pieces on the topic and delivers workshops and presentations at industry events.

-AND-

Beyond the Demo: Engineering AI Agents That Actually Ship

The gap between an AI agent that impresses in a demo and one that survives production is not better prompts. It is engineering discipline applied to a new class of system.

Agents that work in notebooks fail in production for predictable reasons: memory that grows unbounded until context is lost, tools that fail silently and poison downstream reasoning, evaluation that does not exist beyond "chat with it and see," and no observability into why the agent made a specific decision.

This talk covers the emerging discipline of agent engineering, the architectural patterns required to build AI agents that are reliable, testable, and debuggable in production. Drawing from real deployment experience, I will present language-agnostic patterns (with concrete examples) for the four areas where most agent systems fail:

• Memory architecture: Bounded context, summarisation strategies, explicit forgetting policies, and conversation state design
• Tool reliability: Contracts between agents and tools, timeout hierarchies, fallback chains, and output validation before the agent reasons over results
• Evaluation-driven development: Reproducible test harnesses, scenario libraries, regression testing for prompt changes, and comparing agent versions systematically
• Observability: Tracing full reasoning chains so that when an agent produces a bad output, you can reconstruct the decision path that led there

Whether you work in Python, .NET, JVM, or TypeScript, the failure modes are the same. This talk gives you the engineering mental model to ship agents that work every day, not just on demo day.

Brian Aboze

Data Scientist

Aboze Brain John is the founder of KOVR, an early-stage healthtech venture building a privacy-first, AI-assisted nicotine reduction system that integrates IoT hardware, a mobile app, and embedded ethical AI guardrails.

He previously worked as a Developer Advocate at a London-based formal verification and AI safety startup, and as a Data Scientist across financial services, spanning credit, insurance, and community-focused initiatives.

He is an avid technical writer with a strong interest in data science, AI systems, engineering, and building within regulated environments.

.NET Workshop with Hands-On API Building

Join us for an all-day workshop where you will learn about the latest features and enhancements in .NET, ASP.NET Core, and Visual Studio. You will discover:

• What’s New in .NET
• ASP.NET Core Fundamentals
• Building Web Apps with ASP.NET Core
• Building Web APIs with ASP.NET Core
• Hands on Lab - Creating a RESTful API with ASP.NET Core with a database
• Debug your code efficiently with Visual Studio, using breakpoints, watch windows, and diagnostic tools

This workshop will help you master the skills and tools you need to create high-quality web applications. You will also have the opportunity to ask questions and get feedback from the instructor.

Target Audience: This workshop is geared toward individuals getting started with ASP.NET Core or not familiar with how modern ASP.NET Core works. Attendees should have experience with .NET and an understanding of basic web programming paradigms.

Requirements:

• Visual Studio or JetBrains Rider
• .NET 8 or later, 10 is preferred
• .NET Workload of ASP.NET and web development
• git client
• A working internet connection
• Ability to install software on your machine

Joseph Guadagno

Microsoft "Developer Services" MVP, Progress Telerik Champion, and Organizer of Desert Code Camp

Joe Guadagno has been writing software for over 30 years, has been an active member of the .NET community, formerly serving on the .NET Foundation Board of Directors, as President, and has been a Microsoft MVP in .NET for more than 15 years. He has spoken through the United States and international events on topics ranging from Microsoft .NET, Microsoft Azure, Ionic, Bootstrap, and many others. You can see the complete list at https://www.josephguadagno.net/presentations. When not sitting at a computer, Joe loves to hang out with his family and play games. When not playing games with the family, Joe is checking out the latest in Home Automation. You can connect with Joe on Bluesky at @jguadagno.com, Facebook at JosephGuadagnoNet, and on his blog at https://www.josephguadagno.net

My First Kubernetes Cluster

Kubernetes seems to be everywhere today, but many organizations have yet to take the plunge. The Kubernetes ecosystem has so many options that it feels scary to start, especially when you are still working with traditional servers and applications. But that ecosystem also contains tools to provide guardrails to keep you safe.

In this workshop, you’ll start up a Kubernetes cluster in AWS and install utilities to give you valuable insights into what the cluster is doing. You will use Kubernetes commands to deploy, upgrade, scale, and manage your application. You’ll use tools to keep your cluster and applications secure and implement recommended practices. By the end of the workshop, you’ll know the basics of Kubernetes and see how your projects could work differently as containerized Kubernetes workloads.

This is a hands-on tutorial. You will need your laptop and a web browser with internet access.

Gene Gotimer

DevSecOps Engineer

Gene Gotimer is a DevSecOps Engineer who loves playing with new tools, focusing on agile processes, securing development practices, and automating everything. Gene feels strongly that repeatability, quality, and security are all strongly intertwined; each depends on the other two, making agile and DevSecOps crucial to software development.

Workshop Duo

A Developer's Guide to Open Source Web Mapping Libraries

Want to build interactive maps on the web but are not sure where to start? In this hands-on workshop, you'll learn how to build modern browser-based mapping apps using open source tools like Leaflet and MapLibre GL JS. We'll cover the core geospatial concepts developers actually need, how to work with common web map data formats, and how to choose the right library for different use cases.

By the end of the session, attendees will have built a working map experience, added data and interactivity, and picked up practical techniques for performance, styling, and usability. This workshop is designed for JavaScript developers who want a clear, approachable path into web mapping without needing a GIS background.

Courtney Yatteau

Developer Advocate at Esri

Courtney Yatteau is a Developer Advocate on Esri's Developer Experience Team, where she helps developers build better web applications with modern JavaScript tools, libraries, and mapping technology. Before Esri, she taught computer science and mathematics, which shaped her approach to making technical concepts clear, approachable, and visual.

-AND-

Speak Geek: Unlocking Communication Superpowers

As a developer, you speak in code, but what happens when you need to translate that into “human”? Whether you’re chatting with UX folks, wrangling with management, or just trying to explain your latest bug hunt to someone outside tech, communication is a superpower you can actually level up. In this hands-on workshop, we’ll break down the quirks of dev-to-dev, dev-to-UX, and dev-to-everyone-else conversations. We’ll play games inspired by “Poetry for Neanderthals” and “Just One,” and even challenge you to meme your message—no words allowed! Come ready to laugh, learn, and unlock your inner communication hero. Learn to challenge ambiguous conversation into actionable thoughts/items. You’ll leave with practical tools and a fresh perspective to help your team work (and talk) better, together.

Emily Harden

Communications & Engagement Strategist 📣 | Leveraging Insights to Drive Impact 🚀 | Passionate About Community & Growth 🌱

Emily Harden is a knowledgeable consultant, skillful speaker, and community builder dedicated to fostering growth and impact. As the Founder and Owner of Harden Consulting, she provides tailored coaching to help people clarify what they want, navigate pivots, and thrive at work; so your passion becomes a sustainable path. Emily draws on her deep roots in the tech ecosystem, where she previously served as Techlahoma's Executive Director, to connect challenges with creative solutions.

When she’s not working, you can probably find her playing board games, trying out new video games, or off on an adventure with her husband and their dog, Patches!

Amy Norris

Software Development Supervisor, Dimensional Innovations

Amy is a graphic designer turned software developer currently building weird, cool, and unconventional stuff at Dimensional Innovations. On her off time she can be found volunteering with Kansas City Women in Tech, reading or playing Dungeons and Dragons.

Practical Jumpstart: Building Enterprise Apps with .NET MAUI Blazor

This full-day, hands-on workshop takes attendees from zero to a working cross-platform application using .NET MAUI Blazor Hybrid. Designed for developers new to MAUI or looking to adopt it in enterprise environments, the session covers architecture, project setup, tooling, authentication, API integration, and device-specific features. Participants will configure their local development environments, build shared libraries, connect to backend services, and implement platform capabilities such as storage and notifications. Throughout the day, we’ll discuss performance considerations, deployment strategies, and real-world design patterns. Attendees leave with a complete reference application and the knowledge needed to confidently start production MAUI Blazor projects.

Mitchel Sellers

Flying Code Ninja!

Mitchel Sellers is globally known as a 17-time Microsoft MVP, an ASPInsider, a DNN MVP, is an MCP (Microsoft .NET, ASP.NET and SQL Server), and CEO of IowaComputerGurus Inc. Sellers has a deep understanding of software development and when speaking focuses on proper architecture standards, performance, stability, security, and overall cost-effectiveness of delivered solutions. This message and his abilities resonate in the technical war room as well as the executive board room.

Mitchel is a prolific public speaker, presenting more than 400 sessions at user groups and conferences globally, such as DevUp, SDN, and Code PaLOUsa. Sellers has been the author of multiple books and a regular blogger on technology topics.

When Mitchel is not working in technology, you will find him flying his airplane, teaching others how to fly, or spending time with his family He is also actively involved in the Open Source Community working diligently to further the movement. Find out more about Sellers at his website http://www.mitchelsellers.com.