Looking behind the immediate pain of Java's now infamous logging library Log4j:
* How does the vulnerability work?
* Why is it comparatively complex to detect and measure both for customized and off the shelf software?
* How can you monitor exploitation attempts?
Website: https://jdd.org.pl
Facebook: https://www.facebook.com/JDDconf
Twitter: https://twitter.com/JDD_Krakow





![Robert Kruczek, Kamil Szczurowski - [PL] How we hacked half of the Polish government](https://i1.ytimg.com/vi/JCoZrd31EfQ/maxresdefault.jpg)

![Jarosław Wacko - [PL] Cyber Legion - od społeczności do cyberobrony państwa](https://i1.ytimg.com/vi/lVbcwDOH78Q/maxresdefault.jpg)

