LASCON Courses

Brakeman & Jenkins - The Duo Detects Defects in Ruby on Rails Code

Explore static analysis tools for Ruby on Rails, focusing on Brakeman and Jenkins integration. Learn about security warnings, code updates, and best practices for detecting defects.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

An Introduction to ZAP - The OWASP Zed Attack Proxy

Learn to use ZAP, an open-source web application security scanner. Explore features like active scanning, fuzzing, and brute force attacks to enhance your penetration testing skills.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Hacking .NET Applications - The Black Arts

Explore techniques for hacking .NET applications, including malware analysis, code review, and penetration testing. Learn to build keygens, cracks, and overcome security measures in .NET environments.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk

Simplifying Threat Modeling

Simplified approach to threat modeling: identify attack surfaces, visualize users as threats, illuminate assets and trust boundaries, postulate attacks, evaluate impact, and mitigate risks.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Improve Your SDLC with CAPEC and CWE

Enhance software development lifecycle using CAPEC and CWE. Learn threat modeling, design considerations, and security testing techniques to improve application security.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Implementing AppSensor in ModSecurity

Explore advanced web application security techniques using AppSensor and ModSecurity, focusing on detection points, SQL injection prevention, and innovative defense strategies.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Risk Management for Teams That Get Things Done

Explore effective risk management strategies for growing organizations, focusing on peer review, communication, and automation to maintain high uptime standards without sacrificing velocity.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Understanding and Implementing Rugged

Explore the Rugged paradigm for software excellence, focusing on quality, collaboration, and transparency. Learn practical ways to implement Rugged attributes in daily professional life.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Fixing XSS with Content Security Policy

Explore Content Security Policy (CSP) as a defense against XSS attacks, comparing CSP 1.0 and 2.0, and learn implementation strategies for enhanced web application security.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

OWASP Top 10 Proactive Controls

Comprehensive guide to OWASP Top 10 Proactive Controls for secure software development, covering essential techniques from query parameterization to threat modeling, presented by expert Jim Manico.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Implementing a Large Scale Identity Theft Prevention Solution Using the Cloud

Explore a distributed platform on AWS for preventing identity theft, session hijacking, and MitM attacks. Learn about polyglot architecture, custom caching, and strategies for improved resiliency and business continuity.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Keynote - Historical Lessons for Improving Cyber Security

Historical lessons for improving cybersecurity: outsiders' role in cryptography advances, attention to seemingly foolish ideas, and applying risk analysis from nuclear deterrence to cryptography.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Derived Credentials - A Better User Experience for Secure Applications in the Mobile World

Explore derived credentials for secure mobile applications, covering PIV standards, deployment architecture, use cases, and best practices for enhanced user experience in enterprise and government settings.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Multi Factor Authentication - Weeding Out the Snake Oil

Explore multi-factor authentication solutions, evaluation criteria, and implementation considerations for stronger security. Gain insights into market offerings and their credibility.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Be Mean to Your Code - Rugged Development & You

Pragmatic approaches and tools for ruggedizing your development lifecycle, from code commit to running system. Learn solutions for secure, resilient applications in fast-paced environments.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk