Homeland Security Courses

Ekoparty Security Conference

Security Open Source Tools in Cloud Native

Explora vulnerabilidades en contenedores y herramientas de código abierto para DevSecOps en entornos cloud native. Aprende mejores prácticas y técnicas para detectar errores de configuración y mejorar la seguridad.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Ekoparty Security Conference

Security Enhanced on Groups Automation - AKA SEGA

Automatización de gestión de grupos de seguridad en AWS para Mercado Libre: de trabajo manual a controles automáticos. Solución escalable para múltiples cuentas y desarrolladores, manteniendo control sobre cambios en reglas.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Ekoparty Security Conference

Serverless Security - Attack & Defense

Explore serverless security vulnerabilities, attack techniques, and defense strategies through live demos, covering NPM package exploits, RCE, privilege escalation, and insecure defaults in serverless frameworks.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Ekoparty Security Conference

Whac-A-Snake - Hitting Security in Python

Descubre mejores prácticas de seguridad defensiva y ofensiva para aplicaciones Python en el ciclo de vida del desarrollo, incluyendo tecnologías cloud.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Ekoparty Security Conference

SAP Security in Depth - Attack & Secure SAP Systems

Exploración profunda de la seguridad en SAP: ataques, protección y la importancia de salvaguardar aplicaciones empresariales críticas.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Ekoparty Security Conference

Internet-Scale Analysis of AWS Cognito Security

Comprehensive analysis of AWS Cognito security configurations, revealing widespread vulnerabilities in identity pools and resource access. Includes methodology, findings, and recommendations for secure implementation.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

secwestnet

CanSecWest 2022 - Security Conference Highlights

Explore cutting-edge cybersecurity insights and innovations from industry experts at the premier CanSecWest conference, featuring talks on emerging threats and defensive strategies.

• YouTube
• 2 hours 41 minutes
• Self-Paced
• Free Video

secwestnet

RFID Security Research - Early Insights and Implications

Early RFID security research by Adam Laurie, exploring vulnerabilities in RFID passports and predicting the need for RFID-blocking wallets. A pioneering look at RFID technology's security implications.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Free Video

secwestnet

Large-scale Security Analysis of IoT Firmware

Explore automated security analysis techniques for IoT firmware, uncovering vulnerabilities and potential threats in connected devices at scale.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

TED

The Security Mirage

Explore the disconnect between perceived and actual security with expert Bruce Schneier, examining how we prioritize risks and allocate resources in our quest for safety.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Black Hat

Process Injection - Breaking All macOS Security Layers With a Single Vulnerability

Explore macOS security vulnerabilities through process injection, revealing how a single flaw can compromise multiple security layers and impact user data protection.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Black Hat

Calculating Risk in the Era of Obscurity - Reading Between the Lines of Security Advisories

Explore systemic issues in security patches, their impact on enterprise security, and strategies to improve vendor servicing habits. Learn to interpret advisories and prioritize risk management.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Black Hat

Glitched on Earth by Humans - A Black-Box Security Evaluation of the SpaceX Starlink User Terminal

Explore the security vulnerabilities of SpaceX Starlink's User Terminal through black-box hardware evaluation, revealing how voltage fault injection can bypass firmware signature verification.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Black Hat

Security Analysis of CHERI ISA

Explore CHERI ISA's memory-protection features for C/C++, its security guarantees, and how it enhances memory safety in legacy code through architectural and compiler innovations.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Black Hat

The Ripple Effect - Building a Diverse Security Research Team

Strategies for building a diverse and inclusive security research team, highlighting successful approaches to gender equality and representation in the hacking industry.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk