Skip to content

SPEAKER

Sohan Maheshwar
AuthZed

Sohan is a Lead Developer Advocate at AuthZed, based in the Netherlands. He started his career as a developer building mobile apps and has been living in the cloud since 2013, in companies such as Amazon, Fermyon and Gupshup. He is also an O' Reilly author, having created a course on Cloud Concepts for Everyone. He has always been interested in emerging technologies and how it shapes the world around us.

View
Securing RAG Pipelines with Fine Grained Authorization
Conference (ADVANCED level)
Room B1

Building enterprise-ready AI requires ensuring users can only augment prompts with data they're authorized to access. Relationship-based access control (ReBAC) is particularly well-suited for fine-grained authorization in Retrieval-Augmented Generation (RAG) because it makes decisions based on relationships between objects, offering more precise control compared to traditional models like RBAC and ABAC.

This talk covers how ReBAC systems can safeguard sensitive data in RAG pipelines. We'll start with why Authorization is critical for RAG pipelines, and how Google Zanzibar achieves this with ReBAC. We'll then illustrate how pre-filtering vector database queries with a list of authorized object IDs can improve efficiency & security. The talk will also include a demo implementing fine-grained authorization for RAG using Pinecone, Langchain, OpenAI, and SpiceDB.

More
View
(Panel) Building Secure Software: Practical Strategies for Developers
Conference (BEGINNER level)
Room B3

Join us for an engaging and practical panel discussion on integrating security into every stage of the software development lifecycle! This session is all about embracing software security as an integral part of the development process, not just a tick-box exercise. Our distinguished panelists come from a diverse range of backgrounds and will share their unique insights, offering valuable takeaways for all attendees.

Why is this important? Today, security vulnerabilities can lurk in every corner, whether it's a missing patch or a misconfigured setting. This panel will explain how to seamlessly incorporate security practices into coding, testing and deployment. These experts will share practical strategies to enhance your software's security posture immediately, equipping you with the tools you need to do so.

Expect lively interaction! We will encourage questions and real-time feedback, making this a collaborative space where ideas flow freely. Whether you want to understand the latest tools, such as Software Bills of Materials (SBOMs), or learn the best ways to prevent vulnerabilities, you will walk away with useful strategies and a clearer path to fortifying your software development process.

Don't miss this chance to improve your development practices and protect your applications. Together, let's make secure software development an objective we can all achieve!

Panelist

Stefano Maestri, Alessio Soldano, Soroosh Khodami and Sohan Maheshwara

More

Searching for speaker images...