LASCON Courses

Insiders Guide to Mobile AppSec with OWASP MASVS

Learn practical mobile application security testing through OWASP MASVS, covering common weaknesses, attack surfaces, tools, and resilience.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Detection Engineering Methodologies

A methodology for engineering, validating, and organizing detections that identify threat actors throughout different stages of an attack.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

DevSecOps Warning Signs and How to Address Them

Explore warning signs in DevSecOps adoption and practical steps for correcting course when DevOps and digital transformation efforts go off track.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

The Security Practitioner's Guide to Going from "No" to "Whoa"

A security-practitioner talk on prioritizing consequential issues, building a solid foundation, and earning management’s support through stronger relationships.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

10 Pounds of Tacos in a 5-Pound Bag: Lessons Learned from Security Operations in a Dynamic Environment

Lessons from building security processes and teams from the ground up in a dynamic, resource-constrained environment.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

Infosec is Sick - Addressing the Failures in Information Security

An examination of why information security fails to mitigate risk, mismeasures exposure, lacks effective tooling, and loses executive confidence.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Drivers for Software Supply Chain Security Programs

Examines organizational drivers, budgets, and strategies for addressing software supply chain security risks amid major breaches and open-source vulnerabilities.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

Indistinguishable from Magic - How the Cybersecurity Market Reached Its Current State

A cybersecurity maturity talk arguing that resilient processes, feedback loops, and team practice matter more than simply adding products, staff, or training.

• YouTube
• 56 minutes
• Self-Paced
• Free Video

Hacking Blockchain - Smart Contract Security and Exploitation

Learn to develop Solidity smart contracts on Ethereum and identify and exploit common security flaws.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

Cybersecurity Insights: Adversarial Research and Information Management

An invited LASCON session featuring perspectives from adversarial research and engineering and information leadership.

• YouTube
• 54 minutes
• Self-Paced
• Free Video

Elite Security Champions: Building a Strong Security Culture in DevSecOps

Build an elite Security Champion program that strengthens security culture through technical expertise, collaboration, recruitment, communication, and retention.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

The Abridged History of Application Security

A historical tour of application security, from early password and access-control failures to the field’s improving security practices.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Overcoming Resistance to Threat Modeling in Organizations

Strategies for turning organizational resistance to threat modeling into support for adopting the practice.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Free Video

How to Hack an API in 15 Minutes

Explore how attackers discover Shadow APIs, connect to them, and extract large volumes of data using simple techniques and Python code.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Fuzzers, Analyzers, and Other Gophers Insecticides - Session 1

Explore how static analysis, fuzzing, and fault injection uncover common and concurrency-related vulnerabilities in Go applications.

• YouTube
• 56 minutes
• Self-Paced
• Free Video