LASCON Courses

DevSecOps Without DevOps Is Just Security

Explore effective DevSecOps practices, emphasizing collaboration between security and DevOps teams. Learn prerequisites, case studies, and strategies for leveraging existing resources to enhance security integration.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

Rethinking Role-Based Security Education

Strategies for developing role-based security education, focusing on high-risk teams, collaborative threat modeling, and contextualizing security hygiene to improve effectiveness and scalability.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Abusing Normality - Data Exfiltration in Plain Site

Explore stealthy data exfiltration techniques using everyday system objects and processes. Learn to identify and defend against sophisticated attacks that leverage normal-looking channels for malicious purposes.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

How to Create and Cultivate Community within the Cybersecurity Industry

Explore strategies for fostering community in cybersecurity, focusing on gender diversity, professional development, and leadership. Learn to create inclusive environments and drive positive change in the industry.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

IOT Assimilation - Resistance is Futile

Explore the future of IoT, from embedded sensors to quantum computing, and its impact on AI, autonomous vehicles, and augmented reality. Discover key industry trends and regulatory considerations.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

Won't Somebody Please Think of the Data!

Strategies for protecting corporate data from internal threats, focusing on database security, GDPR compliance, and collaboration between engineering and operations teams.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

It Was Broken When It Got Here - Security in Your Software Procurement Process

Explore strategies for ensuring security in third-party software procurement, including case studies of vulnerabilities and guidance for integrating security considerations into the purchasing process.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

AppSec Pipelines and Event-based Security - Moving Beyond a Traditional Security Test

Strategies for scaling AppSec programs using automation, continuous health checks, and event-based security to keep pace with rapid software development and delivery in large organizations.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Information Security Risk Assessment - Lessons from the Front Lines

Practical insights on conducting Information Security Risk Assessments for software products, covering methods, tips, and lessons learned to identify and mitigate potential security risks.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Securing a Raspberry Pi Home Monitoring System

Explore securing a Raspberry Pi home monitoring system, covering project considerations, GPIO layout, software installation, connectivity, settings, firewall, and service status.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

IoT and the Security of That Mobile App - Mark Loveless

Explore IoT security vulnerabilities in mobile apps, focusing on common mistakes, attack vectors, and research techniques. Learn to identify and exploit weaknesses in device-to-cloud communication.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

Demystifying the Ransomware and IoT Threat

Explore ransomware attacks, IoT-based DDoS threats, and their potential combination. Learn analysis techniques, attack stages, and future cybersecurity challenges in this comprehensive overview.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Your Security Tools Are Just a Stop-Gap to Secure DevOps

Secure DevOps: Beyond tools, focus on risk assessment, threat modeling, and custom security controls. Learn to integrate security effectively in CI/CD pipelines for robust application protection.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Cloud Ops MasterClass - Lessons Learned from Cloud Automation

Explore cloud operations at scale, multi-account models, and automated guardrails for security and compliance. Learn to leverage automation tools for efficient cloud management and collaboration.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

A Wake-Up Call - Information Security for Non-Profits, Foundations, and Charities

Exploring cybersecurity challenges for non-profits, this talk offers strategies to protect organizations, donors, and beneficiaries in the digital age, emphasizing unique sector needs and practical solutions.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk