RSA Conference Courses

Sherlock Holmes - Finding Threats We Didn’t Know We Were Looking For

Uses human cognition, visualization, and abductive reasoning to uncover previously unknown cybersecurity threats in complex data.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Pen-Testing the Supply Chain

Learn how adversary simulation and security testing can expose risks across the software supply chain.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Whom Do You Trust - MSPs and Other Forgotten Risks for SMBs

A cybersecurity webcast on how attackers exploit MSPs and trusted software dependencies to compromise small and midsize businesses.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

How to Avoid Being a Scam Victim When Your Phone Rings

Learn to recognize common phone-scam tactics and protect your savings from fraudulent callers.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Confidential Computing in Cloud and Edge

Explore how trusted execution environments protect code and data in cloud and edge environments through hardware-assisted security and attestation.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Post-Exploitation of Cloud Service Providers

Demonstrates AWS post-exploitation techniques for pivoting through cloud environments, stealing credentials, escalating IAM privileges, and maintaining access with the barq tool.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Threat Informed Defense

Use threat models and community-gathered intelligence to prioritize behavior-based detections against changing enterprise threats.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Modern Identity Hacking - Have Hackers Really Adjusted to Constant Remote?

Explore how hackers bypass MFA and attack modern authentication in remote-work environments, including VPNs, session cookies, and Windows Hello for Business.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Fighting New Era Bandits Who Are Plundering Your AI - ML Application

Technical defenses against model extraction attacks, showing how adversaries steal AI/ML models through APIs and how organizations detect and disrupt them.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Cloud Threat Modeling - From Architecture Design to Application Development

Learn to model cloud threats by mapping assets, attackers, attack surfaces, and mitigations through STRIDE, attack trees, and the Cloud Controls Matrix.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

The Rise of the BISO Role

Explore how a Business Information Security Officer builds a cybersecurity service, bridges security and business teams, and aligns risk support with organizational priorities.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Cybersecurity Metrics Development for Board and Risk Committee Reporting

Learn to develop, evaluate, and report actionable cybersecurity metrics that help boards make decisions about cost, maturity, and risk.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Infosec Makeover - Love it or Leave it, Product Security is Here to Stay

Explore product security as InfoSec’s general contractor, covering its scope, capabilities, team structure, and practitioner hiring.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Cryptography in Distributed Systems

Explore cryptographic accumulators, anonymous credentials, multi-party revocation, and compressed Schnorr proofs for privacy-preserving identity and blockchain systems.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Reducing Payment Fraud with SWIFT Customer Security Controls Framework

An expert panel examines how SWIFT’s Customer Security Controls Framework strengthens cyber hygiene and reduces fraud across the global payments ecosystem.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk