LASCON Courses

Keynote - Application Security Challenges and Solutions

Insightful exploration of cybersecurity trends and challenges, offering expert perspectives on industry developments and future directions in information security.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Climbing AppSec Mountains - How to Summit and Overcome Corporate Roadblocks

A talk on organizational roadblocks that undermine shift-left application security and how teams can overcome them.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

A Hacker's Guide to Blockchain, Smart Contracts, and NFTs

A hacker-oriented introduction to blockchain, smart contracts, and NFTs.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

Security While Scaling Agile - Lessons Learned

Learn how to integrate software security into scaled Agile development as a guardrail that protects products without slowing continuous delivery.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Shifting Engineering Right - Security Engineers Learning from DevSecOps

Learn how security engineers can partner with developers to build customer-facing security features and exchange practical knowledge in a DevSecOps environment.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Getting Funding for Security Initiatives - Think Like an MBA, Not a CISSP

Learn to justify cybersecurity investments by aligning security initiatives with organizational risk, business priorities, and measurable indicators.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Infosec Metrics: Measuring and Presenting Security Effectiveness to Leadership

Learn to create automated, near-real-time information security metrics that reveal program health, business-unit risks, security gaps, and engineering progress to leadership.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Cloud Security and Compliance

This training examines cloud computing’s information security risks and mitigation strategies for protecting cloud-based systems, applications, and data.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Manual JavaScript Analysis is a Bug - Automating Security Assessments for Modern Web Applications

Automate repetitive security-analysis tasks and build a focused assessment roadmap for modern JavaScript applications.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

How Security Can Keep Pace with Continuously Evolving Cloud-Native Applications

Explore dynamic, automated security approaches that evolve with cloud-native application architectures and modern development lifecycles.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

JWTs - Patterns and Anti-patterns in Authentication

Examine JWT use cases and anti-patterns, including session design, revocation, token expiration, signing-key rotation, service-to-service authentication, and alternatives.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

SSL Hell: Automated Certificate Management for Microservices

Learn to automate HTTPS certificate issuance, deployment, and renewal for microservices with cert-manager, ACME, and Kubernetes.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Introduction to Inner-Loop Security - Shifting Left, but Better

Explore inner- and outer-loop security as a more effective model for shifting left and enabling developers to build secure-by-design products.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

The Software Security Testing Lifecycle - A Framework for Effective Security Testing

A framework for integrating security testing throughout the software development lifecycle.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Conducting Table Top Exercises for Cyber Incident Response Preparedness

A live cyber incident table-top exercise for testing preparedness, response plans, operational capabilities, and coordination across internal and external organizations.

• YouTube
• 55 minutes
• Self-Paced
• Free Video