Homeland Security Courses

Security BSides San Francisco

An Unlikely Friendship - Why Security Engineers and Product Managers Should Be Working Together

Learn how security engineers can partner with product managers to prioritize security features, advance a security-focused roadmap, and reach security-conscious customers.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Read the Fantastic Manual - Writing Security Docs People Will Actually Read

Learn to identify documentation needs, create security docs iteratively, and measure whether people actually use and understand them.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Embracing Risk Responsibly - Moving Beyond Inflexible SLAs and Exception Hell by Treating Security Vulnerabilities and Risk Like Actual Debt

A security risk-management approach that treats vulnerabilities as debt, replacing inflexible SLAs and permanent exceptions with responsible risk acceptance.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Redefining Threat Modeling - Security Team Goes on Vacation

Explores how to scale threat modeling programs without creating a security-team bottleneck as companies grow.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

How to Orchestrate a Cyber Security Incident Tabletop Exercise

An interactive tabletop exercise that simulates a cyberattack timeline and asks responders to decide what to do next.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Do You Even Tech Anymore - Management & Leadership in Security

Explores the transition from security engineer to manager through self-service, feedback-driven leadership and staying connected with reports.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Emerging Best Practices in Software Supply Chain Security - What We Can Learn from Google, the White House, OWASP, and Gartner

Explores emerging best practices for securing software supply chains through guidance from NIST, Google, the White House, OWASP, and Gartner.

• YouTube
• 14 minutes
• Self-Paced
• Conference Talk

RSA Conference

How to Prepare Infrastructure for a War and Enable a Company's Security

A MacPaw case study on preparing infrastructure, implementing wartime plans, and maintaining company security and business continuity during a full-scale invasion.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

RSA Conference

We're Not Doomed! How to Successfully Manage Software Supply Chain Security

Uses four real-world software supply chain attacks and OSCAR to help organizations assess and improve DevSecOps programs.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

RSA Conference

OWASP Top 10 Security Risks for Low-Code/No-Code

Explore the OWASP Top 10 security risks in low-code/no-code applications, including identity mechanisms and real-world enterprise findings.

• YouTube
• 1 hour
• Self-Paced
• Free Video

RSA Conference

Security-as-Code to Accelerate DevSecOps - A Practical Guide to Get Started

A practical guide to overcoming barriers and taking six steps to use security-as-code for DevSecOps across the application lifecycle.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

RSA Conference

AppSec’s Future and the Rise of the Chief Product Security Officer

Explores why traditional application security cannot scale and how Chief Product Security Officers can address security across digital products, DevOps, APIs, and supply chains.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

RSA Conference

Attacking Machine Learning - On the Security and Privacy of Neural Networks

Explore how adversarial examples fool neural network classifiers and how trained models can leak private training data.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

USENIX Enigma Conference

The Very Hungry Defender - Metamorphosing Security Decision-Making by Incorporating Opportunity Cost

Learn how incorporating opportunity cost and hidden organizational, user, employee, and societal costs can improve information security decisions.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

USENIX Enigma Conference

What Public Interest AI Auditors Can Learn from Security Testing - Legislative and Practical Wins

Learn how public-interest AI auditors can adapt security-testing practices and legal strategies to investigate algorithmic bias and other AI harms.

• YouTube
• 20 minutes
• Self-Paced
• Free Video