© Mapbox, © OpenStreetMap

Speaker

Stefano Amorelli

Stefano Amorelli

Staff Software Engineer - AI - Cybersecurity

Tallinn, Estonia

Actions

Stefano Amorelli is a software engineer and lead with 8+ years of experience in hands-on leadership positions for start-ups and scale-ups across the USA and Europe.

Area of Expertise

  • Business & Management
  • Finance & Banking
  • Information & Communications Technology

Topics

  • Machine Learning and Artificial Intelligence
  • Software Engineering
  • AI and Cybersecurity

Test smarter, not harder with AI-Augmented TDD

TDD—you either hate it or love it. For some, it’s a must; for most, is a nightmare.

In this talk, I’ll share how I experimented with TDD in my own work—facing the same frustrations and failures that many of us do. We’ll tackle these struggles head-on and solve them live, using different LLMs techniques.

We’ll do hands-on live coding for each different approach, showing what works and what doesn't, and how AI can help us write smarter tests, refactor code, and even predict failures, ultimately making you fall in love with TDD.

But that's not it: we'll end up unleashing Agentic AI to show how autonomous systems can take our testing workflow to a whole new level.

This isn’t just a talk—it’s a hands-on, game-changing look at how you can make TDD faster, smarter, and actually, enjoyable!

Practical Exploitation of Agentic AI with Data-Poisoning

Agentic AI is like a superhero—autonomous, powerful, and built to solve our problems.

But even superheroes have weaknesses, and for AI, one it’s data poisoning.

In this speech, we’ll explore how poisoning attacks take advantage of AI’s dependence on data to manipulate its decisions and turn trusted systems into unexpected, dangerous, threats.

Come with me as we demonstrate how these attacks work, why they matter, and what we can do to protect our AI-driven future.

State of State-Management: Practical Comparison in Flutter

Navigating Flutter state management can feel like picking a movie on a Friday night - so many choices, but which one's the best? Join me in this workshop, as we rerun the same app plot using four starring architectures: BLoC, Riverpod, MobX, and Stacked (MVVM)

As we develop the same app through each methodology, we'll demonstrate the strengths and drawbacks inherent to each approach, giving us a comprehensive understanding of which technique best suits your unique needs

Key Takeaways:

- Deep dive into Flutter's BLoC, Riverpod, MobX, and Stacked (MVVM) state management tools;

- Real-world example analysis of each method's best practices, strengths, and weaknesses;

- Guided insights to help pick the best state management for your project's needs.

AI-Powered Flutter Development

"AI won't take your job, it's somebody using AI that will take your job." - Richard Baldwin (World Economic Forum 2023)

In this very hands-on lighting talk, I'll uncover my secrets on how I made the development process of Flutter applications more efficient, reliable, and fun.

We'll go through 11 practical examples leveraging ChatGPT and several different AI tools and strategies applied explicitly to Flutter.

Join me as I unveil scripts, prompts, and custom-made secret tools that have remained under the radar until now.

Walk away with tangible assets that can elevate your development game today!

Case Study: FinTech App Development in Flutter

Let's dive into building FinTech Flutter applications for processing credit card payments from scratch!

We'll talk about the cybersecurity implications in developing applications in a high-regulated industry.

In this session we'll talk about:

- DevSecOps in Flutter.
- Designing and Implementing a Reliable Architecture.
- Production SRE in Flutter applications.

Delivered at: DroidconKE 2023

Credit cards tech and threats: how hackers pay with your money

Ever wondered what makes your payment cards tick?

Who's lurking in the shadows, ready to wreak havoc on your transactions?

Let's dive into the fascinating world of payment card technology, exposing both its inner workings, secrets, and how some gentlemen are trying to mess with these systems (and you).

Delivered at: BSides Tallinn 2023

Ooops... AI did it again! Predictive Incident Management with LLMs

It’s incident time! But what is the best thing about incidents? They bring a lesson to be learned!

LLMs are here to be our post-incident detectives and fortune-tellers, analyzing logs, predicting failures, and whispering solutions before chaos strikes (again).

With AI by our side, every incident becomes an opportunity for smarter, smoother systems.

DevOps & AI Latvia - Jan 2025

Hands-on OWASP Top 10 for LLMs

Everyone talks about AI; let’s focus on how to break it.
In this session we'll uncover the new OWASP Top 10 vulnerabilities specific to large language models, detailing critical security issues like prompt injection and data poisoning.

We'll delve into practical insights and examples for professionals to better understand the modern security landscape of LLMs.

Delivered at: OWASP Riga - inauguration event 2024

Practical Hacking LLMs - Workshop

Last year, at BSides Tallinn 2023, we demonstrated how to exploit ChatGPT on prod.

This year, we'll dive deeper into more real-world LLM vulnerabilities.

In this workshop we'll target some LLMs and exploit the h$ll out of them.

Get your laptop ready for this hands-on workshop!

Delivered at: BSides Tallinn 2024

Exploiting ChatGPT on production

Join me on the dark side: in this hands-on speech, we'll delve into AI vulnerabilities, exploring the OWASP Top 10 for LLMs (released this year) with practical examples and demonstrations!

Delivered at BSides Tallinn 2023

The Power of Community and Open-Source in Tech

Tech evolves so rapidly thanks to the community-driven, open-source movement.

It's not just about the code; it's about the passionate people who build it. Through collaboration, local and online communities make it possible for ideas to flourish, connections to be made, and innovation to happen.

In this session, we'll dive into the impact of engineering communities and open-source projects, examining how they revolutionize the way we work, collaborate, and create.

We'll also uncover how innovative companies can get involved and leverage those initiatives, highlighting both the benefits and the challenges they present.

Delivered at: Digit Tartu 2024

Security BSides Sofia 2025Sessionize Event

March 2025 Sofia, Bulgaria

DevOps & AI Latvia - 2025

January 2025 Riga, Latvia

OWASP Riga - 2024

October 2024 Riga, Latvia

Digit.dev - Tartu 2024

October 2024 Tartu, Estonia

BSides Tallinn - 2024

September 2024 Tallinn, Estonia

droidcon Kenya 2023Sessionize Event

November 2023 Nairobi, Kenya

BSides Tallinn - 2023

September 2023 Tallinn, Estonia

Stefano Amorelli

Staff Software Engineer - AI - Cybersecurity

Tallinn, Estonia

Actions

Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.