LASCON Courses

Insiders Guide to Mobile AppSec with OWASP MASVS

Explore mobile app security essentials using OWASP MASVS, covering data storage, network issues, authentication, and anti-tampering. Learn practical tools and tactics for effective mobile pen testing and security assessment.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Detection Engineering Methodologies

Comprehensive methodology for engineering effective threat detections, covering structure, processes, and technologies for a successful detection program.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Being Powerful While Powerless - Elevating Security by Leading Without Authority

Strategies for implementing security measures and fostering a security-conscious culture as a lone security professional, emphasizing soft power, automation, and cross-departmental collaboration.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Reversing Client Side JavaScript Using the Chrome Dev Tools Protocol

Explore Chrome Dev Tools protocol for JavaScript reversal, bug finding, and vulnerability detection. Learn to modify web app behavior and automate pentesting tasks using Go-based plugins.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

A Stratagem on Strategy - Rolling Testing into Product Testing

Explore integrating security testing into product testing strategies, enhancing coverage and aligning security with software requirements for more effective quality assurance in the SDLC.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Application Logging in the Era of GDPR

Explore application logging best practices in the GDPR era, covering security, privacy, data protection, and compliance recommendations for developers and operations teams.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Threat Modelling Stories from the Trenches

Explore real-world design flaws and secure design principles through interactive case studies in threat modeling across various domains, enhancing your software analysis skills.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

A DevOps View of AppSec

Explore DevOps history and its impact on AppSec, charting a path for DevSecOps success through standardization, automation, and Agile principles.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Cloud Security at Scale - Managing the Chaos

Explore the challenges and best practices for securely migrating large enterprises' legacy infrastructure to the cloud, with actionable insights for a successful transition.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Do Certain Types of Developers or Teams Write More Secure Code?

Explore factors influencing secure code development, including developer experience, team dynamics, and work environment. Learn how human and environmental elements impact software security.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Achieve AI-powered API Privacy Using Open Source

Explore AI-powered API privacy using open-source tools. Learn about Privacy-by-Design, threat modeling, and leveraging deep neural networks to protect customer data in software development.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

The Battle to Address Mobile in the Endpoint Security Space

Explore mobile device security challenges, threats, and vulnerabilities in enterprise environments. Learn about the increasing importance of mobile security and strategies to protect against data breaches.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Learning the Power of the -Not My Responsibility- Mindset

Discover how shifting security responsibility to the business can improve accountability, reduce friction, and prevent burnout among security engineers while enhancing overall company security.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Securing Modern API and Microservice Based Applications by Design

Learn to secure modern API and microservices architectures with expert insights on key concerns, architectural patterns, and actionable solutions for robust application security.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

The A's, B's, and Four C's of Testing Cloud-Native Applications

Explore cloud-native app testing with the A's, B's, and Four C's framework, covering threat modeling, API testing, and security management for modern software development.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk