Homeland Security Courses

SEAPATH: A LF Energy Project for Critical Infrastructure with Emphasis on Software Supply Chain Security

Explore SEAPATH, an LFEnergy project revolutionizing electrical grid substations through virtualization, enhancing adaptability and interconnections while prioritizing reliability and cybersecurity for critical infrastructure.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Security Research with Open Source Software - Volume Omega

Explore open source software security with the OpenSSF Alpha-Omega team. Learn about automated security patches, vulnerability research, and tools to address global security concerns in the OSS ecosystem.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Bringing Service Security to a New Level - An Introduction to SaaSBOMs

Explore SaaSBOMs: enhancing service transparency, addressing complexities in generation, and discussing future developments for improved software supply chain security and legal compliance.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Improving the Security of a Large Open Source Project One Step at a Time

Explore Node.js security initiatives, from new features to vulnerability management. Learn to apply these insights to your development process and contribute to the Node.js community's security efforts.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Insights from the Cloud Native Security Slam

Explore lessons from CNCF's Security Slam, focusing on best practices for securing the software supply chain and addressing remaining gaps in cloud native security.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Secure the Linux Kernel with eBPF Linux Security Module

Explore eBPF Linux Security Module for implementing granular security policies in the Linux kernel without configuration or kernel modules. Learn to leverage BPF LSM hooks for MAC and DAC policies.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

OpenJS and Security Updates with Community Panel

Panel discussion on OpenJS Foundation initiatives and security updates, featuring insights from industry experts on current trends and best practices in JavaScript development.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

IMA Namespaces for Container Security Enhancement

Enhancing container security with IMA namespaces, integrating with Kubernetes and remote attestation for detecting file changes within containers.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Scaling the Security Researcher to Eliminate OSS Security Vulnerabilities - Automated Bulk Pull Request Generation

Explore scalable solutions for identifying and fixing widespread security vulnerabilities in open-source software using automated tools and techniques to enhance efficiency and impact.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Devoxx

Everything New in Spring Security 6 Baked with a Spring Boot 3 Recipe

Explore the latest features and enhancements in Spring Security 6, integrated seamlessly with Spring Boot 3, to improve application security and streamline development processes.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Devoxx

Test Driven Security with Spring

Learn to implement robust security measures in Spring applications using test-driven development techniques, enhancing code quality and reliability.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Devoxx

SEVEN Things About API Security

Discover essential API security practices, covering authentication, authorization, data protection, and threat mitigation strategies for robust and secure API development.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Deep Diving Into gRPC Security - A Case Study on API Security Testing with Protobuf Reflection

Explore innovative approaches to secure gRPC microservices, including constructing a gRPC server for API security tests and overcoming challenges with Protobuf reflection.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

What's New in gRPC Security for 2023 - Audit Logging and CRL

Explore gRPC Security updates for 2023, focusing on Audit Logging and enhanced CRL behaviors. Learn to implement effective security measures and safeguard systems against emerging threats.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

The Security Evolution of gRPC Services in the Mesh

Explore the evolution of securing gRPC services in containers and service mesh, focusing on Istio's role in enhancing security for east-west traffic without sidecar complexity.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk