LASCON Courses

Rugged Software Engineering

Practical strategies for rapid and secure software development, addressing challenges in modern engineering organizations and emphasizing rugged software practices.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

No More Monkey Business - Quality Assurance in Penetration Testing

Explore quality assurance in penetration testing, addressing declining standards and providing guidance for improving security assessment practices and maintaining excellence in the field.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Penetration Testing - The Other Stuff

Explore tools and tips for effective penetration testing, from data collection to reporting, with insights on organization, documentation, and disaster recovery.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

We Are the Cavalry - Why It Has to Be Us and Why Now

Exploring cybersecurity challenges in the Internet of Things era, emphasizing the need for proactive measures and collective responsibility to address emerging risks and protect human safety.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Big Data, Little Security - Practical Steps for Securing Big Data

Practical steps for securing big data installations, addressing challenges and vulnerabilities in velocity, variety, and volume. Explores security measures, authentication, and threat modeling.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

From Gates to Guardrails - Alternate Approaches to Product Security

Exploring Netflix's innovative approach to product security, emphasizing automation, DevOps culture, and continuous assessment for agile development in cloud environments.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Million Browser Botnet

Explore how online advertising networks can be exploited to create massive browser botnets, enabling DDoS attacks, spam campaigns, and password cracking without leaving traces. Learn about the scalability and potential risks of this attack scenario.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Railsgoat - Rails Attack and Defense

Explore RailsGoat, an OWASP project for Rails security training. Learn common vulnerabilities, remediation techniques, and attack scenarios aligned with the OWASP Top 10 using a purposely vulnerable Rails application.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Minding the Gap - Secure PhoneGap Apps

Explore PhoneGap's security vulnerabilities, attack surfaces, and mitigation strategies for cross-platform mobile app development. Includes live demos, real-world examples, and practical recommendations.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Riding the Magical Code Injection Rainbow

Explore advanced exploitation techniques for SQL injection, XPath injection, cross-site scripting, and shell command injection using the Magical Code Injection Rainbow framework for configurable vulnerable applications.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Malware Automation

Explore automated malware production techniques, tools, and methodologies used by attackers to generate thousands of threats daily, including a live demonstration of the process.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Everything Useful I Learned About Software Security, I Learned at Microsoft

Discover key software security insights from Michael Howard's 18-year Microsoft journey, covering depreciation, friction reduction, network security, and practical strategies for robust development.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

Fast Adversaries - Fast Countermeasures

Fast-paced hacking techniques and countermeasures: Learn about adversaries' evolving tools, tactics, and how to protect assets effectively. Explore rapid detection, patching, and risk management strategies.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Security Automation in the Agile SDLC - Real World Cases

Explore real-world examples of implementing successful security automation in fast-paced Agile development environments, focusing on practical strategies and processes.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Authz is the New Authn - Trust Elevation with UMA and OpenID Connect

Explore standards-based trust elevation in online identity using UMA and OpenID Connect for enhanced fraud mitigation and centralized authentication policies in web access management.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk