Homeland Security Courses

VEXing Open Source Security - Vulnerability Data for Everything

VEX uses machine-readable vulnerability data to clarify whether CVEs are exploitable in shipped open source software and dependencies, helping reduce false positives.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Implementing Container Privilege Escalation Detection Using eBPF for Cloud Native Security

A practical demonstration of using eBPF tools to detect privilege escalation in containers and extend Kubernetes monitoring with security visibility.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Kubernetes Security After Pod Security Policies Removal

Clarifies whether Kubernetes Pod Security can replace removed Pod Security Policies and when external admission controllers remain necessary.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

From a Security Expert's Diary: DOs and DON'Ts When Choosing Software for Embedded Products

A project diary traces how software selection decisions—from distribution and layers to updates—shape an embedded product’s security.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

CIP: Reusing and Strengthening Open Source Component Security for Industrial Grade Systems

How CIP reuses and strengthens open-source components to meet industrial cybersecurity standards.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

A Different Kind of S3 - First Line Security of the Supply Chain

A three-part approach to software supply chain security: inventory components with an SBOM, verify packages through signing, and reduce exposure by slimming them.

• YouTube
• 18 minutes
• Self-Paced
• Free Video

Security with Certificates in Kubernetes

Learn how certificates establish identity and secure Kubernetes components, from creating a certificate authority to kubeadm’s automated certificate generation.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

Vulnerabilities and Misconfigurations in Cloud-Native Security - Two Sides of the Same Risk Coin

A Log4j supply chain attack shows how cloud misconfigurations and known vulnerabilities can combine to expose cloud-native applications.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

A Different Kind of S3 - First Line Security of the Supply Chain

A presentation on securing the supply chain at its first line of defense.

• YouTube
• 18 minutes
• Self-Paced
• Free Video

A Checklist for Security from Container to Kubernetes - An End-to-End Overview

A security checklist tracing protections from the container lifecycle and supply chain through Kubernetes infrastructure and attacks.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Exploring Runtime Security and Forensics Using eBPF

Explore how eBPF can support runtime security and forensic investigation.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Improving Container Security with System Call Interception

See how seccomp interception lets privileged monitors selectively handle system calls from unprivileged containers, including LXD’s transparent replacement of mount calls with FUSE mounts.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Memory Sharing Mechanisms in Linux - Implementation and Security

A discussion of mshare’s Linux implementation, including shared memory regions, API security, and opt-in semantics.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

5 Open Source Security Tools All Developers Should Know About

An overview of five open-source security tools aimed at developers.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Security as Code: A DevSecOps Approach

An introduction to treating security as code within a DevSecOps approach, using SQL injection and code vulnerability examples.

• YouTube
• 23 minutes
• Self-Paced
• Free Video