RSA Conference Courses

The Five Most Dangerous New Attack Techniques

A briefing on the five most dangerous new attack techniques, emerging attack vectors, and how organizations can prepare for them.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Getting Started with MITRE Shield

An introduction to MITRE Shield, covering deception and adversary engagement techniques and their use from defensive strategy setting through implementation.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Security-as-Code to Accelerate DevSecOps - A Practical Guide to Get Started

A practical guide to overcoming barriers and taking six steps to use security-as-code for DevSecOps across the application lifecycle.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

AppSec’s Future and the Rise of the Chief Product Security Officer

Explores why traditional application security cannot scale and how Chief Product Security Officers can address security across digital products, DevOps, APIs, and supply chains.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

The Game of Cyber Threat Hunting - The Return of the Fun

A live demo introduces new approaches that bring creativity and excitement back to cyber threat hunting.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Android Rootkits - Analysis from Userland and Kernelland

Analyzing Android rootkits with live memory forensics, dynamic binary instrumentation, and applied machine learning to generate actionable threat intelligence.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

WebAuthn - How to FIDO

Tutorial on implementing FIDO2 WebAuthn for phishing-resistant, passwordless authentication in websites and applications.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

My Phishing Kit Burnbook

A year of phishing kit research reveals the cybercrime groups behind SaaS-like kits and introduces PhishPond for detection and analysis.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Analyzing Windows Malware on Linux - Getting Started Tips and Examples

Get started analyzing Windows malware with free Linux tools and the REMnux toolkit.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Evasion, Poisoning, Extraction, and Inference - Tools to Defend and Evaluate

A technical demonstration of open-source tools for reproducing and defending against evasion, poisoning, extraction, and inference attacks on machine-learning models.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

CVSS Scores Are Dead - Let’s Explore 4 Alternatives

Explore limitations of CVSS and compare risk-based vulnerability scoring alternatives that account for exploits, patches, and deployment scale.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Three’s Company - Unpacking and Settling in with Three NIST Frameworks

Learn how NIST’s Risk Management, Cybersecurity, and Privacy Frameworks complement one another to improve enterprise risk management.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Protests, Pandemics, and Privacy - The Rise of Surveillance States

Examines how the COVID-19 crisis accelerated worldwide surveillance, eroded privacy, and shaped choices facing China, the United States, and the wider world.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

DBOM and SBOM - New Options for Better Supply Chain Cybersecurity

Explores how Digital and Software Bills of Materials document component provenance to address cybersecurity risks across complex global supply chains.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

A Case Study of the Capital One Data Breach

A technical case study of the 2019 Capital One data breach examines attack methods, NIST-based compliance requirements, and corporate culture’s effect on cybersecurity.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk