Catherine Edelveis
Developer Advocate at BellSoft
Almaty, Kazakhstan
Actions
Catherine Edelveis is a Developer Advocate at BellSoft and the co-host of CyberJAR, a YouTube channel dedicated to practical, state-of-the-art Java. She is focused on the JVM ecosystem and helps teams ship performant and secure cloud-native Java applications using modern OpenJDK capabilities and proven open-source tools. Passionate about sharing knowledge, she is a conference speaker, an active technical writer, and a host of regular livestreams with leaders from across the Java community.
Area of Expertise
Topics
Spring, Quarkus, and Friends: Pick Your Character
Choosing a Java framework is not like picking a transportation method that will get your project from IDE to prod via a shortest route. Rather, it is like selecting a character at the start of a long journey. Each of them comes with a distinct personality, strengths, constraints, and a preferred playstyle that shapes every decision along the way.
In this talk, we look at Spring, Quarkus, Jooby, and Vert.x as four approaches to building software. Using the same use case, a moderately complex HTTP service with persistence, authentication, and background processing, we build the service four times and observe how each framework steers the architecture in different directions and shapes the long-term consequences of the choice: not only the good parts, but also onboarding friction, sharp edges, and maintainability.
This is a practical guide for developers and architects who want to choose a framework based on real constraints such as team size, delivery pressure, and system longevity. Attendees will leave with a clear mental model for matching their problem to a framework before they commit to a playstyle they didn’t intend.
From Cold Starts to Escape Velocity: Three Practical Ways to Accelerate Java Services
Java applications can be incredibly performant in the long run, but their weakest spot is at the startup as they may take seconds to start and minutes to warm up. During that period, they consume more memory and process fewer requests. It gets even worse when you restart the application hundreds of times a day or when you need faster rollout for faster feedback loop.
Luckily, there are not one but three approaches to dealing with this problem:
- GraalVM Native Image
- Coordinated Restore at Checkpoint
- Project Leyden
They all differ in terms of ease-of-use and impact on startup/warmup time reduction. We will explore them one by one unveiling caveats and opportunities they offer so that you can choose a perfect solution for your project.
The Persistence Heavyweight Championship: JPA vs. jOOQ
"In the blue corner: the undisputed heavyweight industry standard, the king of the ORMs, weighing in with a decade of dominance and millions of Stack Overflow answers... JPA!
In the red corner: the lean, type-safe challenger, the Sultan of SQL, the elite defender of the database... jOOQ!"
This session isn't just a talk; it’s a technical title fight. We’re going glove-to-glove on the issues that matter: the N+1 knockout, the "Criteria API" clinch, the power of code generation, and raw runtime performance. After every round, the referee (the audience) will vote to decide who landed the winning blow. Who will bring home the belt, and who will be left on the canvas? Your vote decides the champion.
Mission Possible: The 45-Minute Path to Bullet-Proof Java Container Images
Your mission is to turn a bloated CVE-infested container image into a low-noise image with low vulnerability exposure and clear operational posture. You have 45 minutes before the explosive attack hits. Mission possible!
This session provides a straight path towards building more secure and maintainable Java container images. We will identify the key culprits such as stale dependencies, outdated base, lack of provenance, and excessive privileges. Then, we will draft a step-by-step plan to:
- Pick a minimal and well-maintained base image,
- Shrink privileges,
- Prove provenance with version pinning, signatures and SBOMs,
- Scan and classify with CVSS rules to cut noise and fix what’s exploitable,
- Automatically monitor for updates with Dependabot/Renovate.
Expect a before/after scan comparison, copy-and-paste Dockerfile instructions, verification checklist, and a clear and reproducible path towards hardened Java container images that provide an impenetrable lock-box for your applications.
Welcome to the Scannerverse: A Developer’s Map of Security Tools
Modern applications rely on hundreds of libraries, third-party APIs, container images, and automated build pipelines. As a result, it is impossible to spot every security gap across code, dependencies, images, and runtime settings without dedicated tools. That’s where security scanners come in — they automate flaw detection and continuously reassess risk as new vulnerabilities appear.
Unfortunately, developers are often overwhelmed by overlapping security tools that are adopted randomly and lead to duplicated coverage, blind spots, and noisy results.
This talk provides developers with a structured overview of security scanners and how they fit across the software development lifecycle. With that, they can map a clear route through the Scannerverse instead of drifting from tool to tool.
We will
- Classify scanners by purpose: secrets, dependencies, image/SBOM, configuration, runtime detection;
- Identify the best stages to use them: pre-commit, CI, post-publish, runtime;
- Demonstrate realistic workflows and integrations with widely used tools.
By the end, attendees won’t just know which scanners exist. They’ll know where they belong, what they’re good at, and how to use them to measurably reduce risk in the software they ship.
Catherine Edelveis
Developer Advocate at BellSoft
Almaty, Kazakhstan
Actions
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top