LASCON Courses

Hacking Blockchain - Smart Contract Security and Exploitation

Explore Ethereum blockchain security: learn smart contract development, identify vulnerabilities, and understand Web3 trends. Gain insights into coding and exploiting blockchain technology.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

Cybersecurity Insights: Adversarial Research and Information Management

Engaging discussion on cybersecurity challenges and strategies with industry experts Chris Roberts and Charles Valentine, offering valuable insights for professionals.

• YouTube
• 54 minutes
• Self-Paced
• Free Video

Elite Security Champions: Building a Strong Security Culture in DevSecOps

Explore building an elite Security Champion program for DevSecOps success. Learn essential skills, program elements, and strategies to create a strong security culture and maximize ROI.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

The Abridged History of Application Security

Explore the evolution of application security from the 1960s to present, highlighting improvements and inspiring security professionals with a historical perspective on industry progress.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Overcoming Resistance to Threat Modeling in Organizations

Strategies for overcoming resistance to threat modeling in organizations, addressing common obstacles, and turning initial rejections into opportunities for gradual adoption and growth.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Free Video

How to Hack an API in 15 Minutes

Discover how hackers exploit Shadow APIs to extract large volumes of data quickly. Learn about this basic yet non-obvious security vulnerability and creative methods used by attackers.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Fuzzers, Analyzers, and Other Gophers Insecticides - Session 1

Explore techniques for discovering vulnerabilities in Go code, including static analysis, fuzzing, and fault injection. Learn about common bugs, concurrency issues, and tools for automated vulnerability detection in Go applications.

• YouTube
• 56 minutes
• Self-Paced
• Free Video

Build More Secure Apps with OWASP SKF and ASVS on Kubernetes

Enhance app security using OWASP SKF & ASVS on Kubernetes. Learn integration, manage ASVS requirements, and explore SKF Labs. Includes demo and GitHub repo for easy deployment on EC2 or AWS.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Scanning at Scale with OWASP ZAP - Technical Challenges and Improvements

Explore techniques for scaling OWASP ZAP scans, including technical challenges, modifications, and improvements. Learn from Probely's experience as active ZAP contributors.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

A Visual Journey to Demystifying OAuth2 and OIDC - Why Do They Exist and How to Properly Use Them to Secure Your Applications

Explore OAuth2, OIDC, and related security standards through visual explanations. Learn their purposes, differences, and proper implementation for secure authentication and authorization.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

The Case for Runtime Protection

Runtime protection: inoculating apps against vulnerabilities without changing code. Explores how instrumentation hardens applications, making OWASP Top Ten harder to exploit. Discusses accuracy, performance, and impact on security culture.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

Lessons Learned Building a Software Supply Chain Security Team

Insights on building a software supply chain security function, exploring the role of SBOMs and addressing challenges in implementing effective security measures.

• YouTube
• 56 minutes
• Self-Paced
• Free Video

Using API Specifications to Attack APIs

Explore API security vulnerabilities, breaches, and scanning tools. Learn to leverage API specifications for both protection and potential exploitation in this comprehensive overview.

• YouTube
• 57 minutes
• Self-Paced
• Free Video

Building Trust-Based Networks with Dime Data Format

Explore Dime, a modern data format for building trust networks and enabling secure communication. Learn its advantages over X.509 certificates and its potential for future applications.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Defense-in-Depth Engineering Techniques for Secure Software Design

Explore techniques for building resilient software, identifying overlooked vulnerabilities, and designing for incident preparedness. Learn to architect secure systems and improve incident response capabilities.

• YouTube
• 55 minutes
• Self-Paced
• Free Video