LASCON Courses

OWASP Top 10 - Vulnerabilities A2 to A4 - Part 2 of 5

Explore critical web application security risks A2-A4 from the OWASP Top 10, focusing on broken authentication, sensitive data exposure, and XML external entities.

• YouTube
• 1 hour 8 minutes
• Self-Paced
• Free Video

OWASP Top 10 Security Risks - Part 1 of 5

Comprehensive overview of OWASP Top 10 security vulnerabilities, focusing on injection flaws and broken authentication. Learn to identify and mitigate critical web application risks.

• YouTube
• 1 hour 31 minutes
• Self-Paced
• Free Video

Making Vulnerability Management Easier with DefectDojo - 2016 OWASP Project

Streamline vulnerability management with DefectDojo: automate reporting, metrics, and self-service tools for efficient security practices in large enterprises.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Trusted Execution: A Deterministic Approach to AppSec for Zero-Day Threat Prevention - 2016

Explore Trusted Execution, a novel approach to application security that promises zero-day threat prevention through granular memory-level visibility and context, eliminating false positives in advanced security threats.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Three Profiles of OAuth2 for Identity and Access Management - 2016

Explore OAuth2 profiles for identity and access management, covering OpenID Connect, UMA, and Google's approach. Learn strategies for implementing OAuth2 in enterprise security infrastructure.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Securing the Spark Fire Hose - 2016

Learn to secure Apache Spark in big data analytics. Explore code and configuration security, data protection strategies, and integration with common technologies to safeguard critical information throughout its lifecycle.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

HoneyPy and HoneyDB: Leveraging Honeypots for Network Security - 2016

Explore honeypots, HoneyPy, and HoneyDB for network security. Learn about low-interaction honeypots, threat detection, and leveraging honeypot data to enhance organizational cybersecurity defenses.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Mind the CSP Gap: Challenges Developing a Meaningful Content-Security-Policy

Strategies for implementing Content Security Policy (CSP) effectively, addressing challenges and phasing in a meaningful policy without disrupting engineering teams.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

API Security Best Practices and Guidelines - 2016

Explore industry-leading best practices for designing secure APIs, navigating standards, and protecting both public and private APIs to maximize benefits while keeping threats at bay.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Easy Mobile Hacking: Native and Hybrid Pitfalls - 2016

Uncover common vulnerabilities in mobile apps, both native and hybrid, using free tools. Learn to identify and exploit configuration weaknesses across Android and iOS platforms.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Scanning IPv4 for Exposed Data and Vulnerable Databases

Exploring IPv4 scans to uncover exposed databases, revealing vulnerabilities in popular key-value stores and the risks of data theft and remote code execution in insecure setups.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Practical iOS Reverse Engineering - Beyond the Script

Explore advanced iOS reverse engineering techniques, including binary patching and MACH-0 reversing, to uncover hidden vulnerabilities and bypass jailbreak detection in mobile applications.

• YouTube
• 54 minutes
• Self-Paced
• Free Video

Euro-mageddon: Updating Security and Privacy Programs for GDPR - 2016

Comprehensive guide to updating security and privacy programs for GDPR compliance, covering key principles, penalties, and practical steps for implementation over 18 months.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Internet of Things Security Challenges and Approaches - 2016

Explore challenges and approaches for securing Internet of Things (IoT) devices, including heterogeneous environments, data gathering, and working with project sponsors to identify and resolve security issues.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

Architecting a Security Program for the Future

Interactive workshop on risk-based security management, using role-playing to assess, prioritize, and mitigate risks in a fictional company. Provides practical tools and strategies for modern cybersecurity challenges.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk