Homeland Security Courses

44CON Information Security Conference

What it Means to Have the C Word in the National Security Agenda

Explore the evolution and impact of cybersecurity as a national security issue, examining diverse global approaches and their implications for future policy and strategy.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Three Decades in Security - What’s Changed, and What Hasn’t

Explore cybercrime evolution over 30 years: changing motivations, increased stakes, persistent vulnerabilities, and enduring hacking techniques. Assess lessons learned and current security landscape.

• YouTube
• 1 hour 3 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Frictionless Security

Explore automated, non-intrusive security integration into company infrastructure. Learn from successes, failures, and future improvements in implementing frictionless security programs.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Software Defined Networking - SDN Security

Explore SDN security implications, attack surfaces, and vulnerabilities with live exploit demos. Learn about efforts to enhance SDN controller security and future developments.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Toppling Domino - Testing Security in a Lotus Notes Environment

Explore Lotus Notes/Domino security vulnerabilities and learn effective penetration testing techniques for web servers, native servers, and client-side exploits.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Security Module for PHP7 - Killing Bugclasses and Virtual-Patching the Rest

Explore Snuffleupagus, a new PHP security module for killing bug classes and virtual-patching vulnerabilities without modifying application code. Learn its features and implementation.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Bypassing Port-Security In 2018 - Defeating MacSEC and 802.1x-2010

Explore novel techniques for bypassing 802.1x-2010 and MacSEC, discussing weaknesses in EAP and demonstrating improved methods for network penetration using the open-source tool Silent Bridge.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

IEEE

The Round Complexity of Perfect MPC with Active Security and Optimal Resiliency

Explores round complexity in perfect multi-party computation, focusing on active security and optimal resiliency. Discusses recent developments, protocol folding, and impossibility results.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

RSA Conference

The New Ground Truth for Security

Explore how infrastructure can establish a new ground truth for cybersecurity professionals, addressing misinformation and advanced threats in today's complex digital landscape.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

NorthSec

Burnout - Destabilizing Retention Goals and Threatening Organizational Security

Explore strategies to prevent burnout in cybersecurity professionals, improve talent retention, and maintain organizational security through effective mental health support and skill development.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

NorthSec

Security Metrics That Matter

Learn to identify and utilize security metrics that truly matter for effective organizational protection, focusing on improvement and smart resource allocation.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

NorthSec

dRuby Security Internals

Comprehensive analysis of dRuby's security vulnerabilities, exploring its API, internals, and wire protocol. Demonstrates novel exploitation techniques and discusses efforts to harden dRuby against identified issues.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

NorthSec

Kubernetes Security 101 - Best Practices to Secure Your Cluster

Learn essential best practices for securing Kubernetes clusters, covering key vulnerabilities, attack vectors, and protective measures to safeguard containerized applications.

• YouTube
• 3 hours 28 minutes
• On-Demand
• Conference Talk

NorthSec

DIY Static Code Analyzer - Building Your Own Security Tools with Joern

Learn to build custom security tools using Joern for static code analysis, enhancing your ability to detect vulnerabilities and improve software security.

• YouTube
• 3 hours 3 minutes
• On-Demand
• Conference Talk

NorthSec

Practical Security in the Brave New Kubernetes World

Explore Kubernetes security vulnerabilities through hands-on recon and exploitation of clusters, sidecars, and supporting infrastructure. Learn practical techniques for compromising and persisting in real-world K8s environments.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk