Homeland Security Courses

LASCON

All Day All Night API Security - Endpoint Analytics for Attack Detection

Explore how API and endpoint analytics can reveal attacks across large volumes of monitored transactions.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

LASCON

Managing SaaS Application Sprawl and Security Risks

Learn ways to manage SaaS application sprawl and shift IT’s role from “department of NO” toward practical risk management.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

LASCON

Fortifying DevOps: Unveiling Security Activities and Maturity Models for Resilient Software Development

Explore security activities across DevOps phases and how maturity models can support resilient software development and DevSecOps adoption.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

LASCON

Unlocking Startup Success: The Vitality of Security Assessments and How to Master Them

Learn how security assessments evaluate an organization’s controls and help startups establish a stronger security posture.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

LASCON

Security Safari: A Journey Through the Wilderness of Securing Budding Opensource Projects

Actionable security guidelines help open-source maintainers build fundamental protections into new projects from day one.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

LASCON

System Assurance with the IoT Security Testing Guide

A walkthrough of the OWASP IoT Security Testing Guide’s models, tools, and test cases for conducting comparable penetration tests across IoT systems.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

LASCON

Enhancing ReactJS Application Security: Cross-Site Scripting and Client-Side Defense

Practical recommendations for preventing cross-site scripting and other client-side vulnerabilities in React applications.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

LASCON

Five Pillars of Security Automation - API Security Past and Future

A retrospective on a decade of API security automation and a forecast of what may matter in the next decade.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

LASCON

A New Recipe for Security Risk Evaluation

Learn a security risk scoring method that combines assessment criteria with vulnerability factors to guide product teams’ priorities throughout the product lifecycle.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

LASCON

Top Gun's Unsung Hero - A Surprising Lesson for CI/CD Security

A Top Gun school hero’s creative approach offers an unexpected lesson in identifying what CI/CD pipelines need to withstand software supply chain threats.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

LASCON

Navigating Security Pitfalls During M&A: Playbooks and Strategies for Doing Acquisitions Right

Playbooks scale security evaluations before acquisitions and guide post-close integration while minimizing risk without slowing the business.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

LASCON

Small Language Models for Application Security - Beyond ChatGPT

Explore how small, open-source language models can enhance application security workflows and move security further left.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Free Video

OWASP Foundation

Breaking and Fixing Web Application Security

A talk on breaking and fixing web application security, connecting attacks such as XSS and SQL injection with proactive defenses.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

OWASP Foundation

Defining and Embracing Software Fragility - Balancing Complexity and Security

Examines software fragility as an attack surface and introduces a “wellness” approach to building a sustainable, secure, robust foundation.

• YouTube
• 56 minutes
• Self-Paced
• Free Video

RSA Conference

Building and Breaking Vulnerable APIs - API Security Vulnerabilities and Exploits

Explore common API security vulnerabilities, how attackers exploit them, and how developers can fix them, including risks from security misconfiguration.

• YouTube
• 57 minutes
• Self-Paced
• Free Video