Homeland Security Courses

LASCON

Everything Useful I Learned About Software Security, I Learned at Microsoft

Discover key software security insights from Michael Howard's 18-year Microsoft journey, covering depreciation, friction reduction, network security, and practical strategies for robust development.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

LASCON

Security Automation in the Agile SDLC - Real World Cases

Explore real-world examples of implementing successful security automation in fast-paced Agile development environments, focusing on practical strategies and processes.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

LASCON

Getting Security Up to Speed with CI - CD

Automating security in CI/CD: Learn about Threadfix-Centric Application Security Architecture, challenges in AppSec testing, and leveraging QA regression for enhanced coverage.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

LASCON

Designing Flexibility in Software to Increase Security

Explore designing flexible software architecture to enhance security, adapt to changes, and prevent vulnerabilities. Learn from real-world examples and gain practical tips for writing better, more adaptable code.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

LASCON

Static Analysis Security Testing for Dummies and You

Demystifying Static Analysis Security Testing: Learn how SAST tools work, customize them for your needs, and integrate them into your development pipeline for improved application security.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

LASCON

How Google Turned Me Into My Mother - The Proxy Paradox In Security

Explores delegation challenges in online security, highlighting gaps between real-world representation and current identity models. Discusses implications for IoT and proposes solutions for inclusive security and privacy.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

OWASP Foundation

A Wander Through the World of Container Security

Explore container security, from Docker to Kubernetes, covering breakout vulnerabilities, networking challenges, and RBAC. Gain insights into potential threats and future attack vectors in containerized environments.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

OWASP Foundation

OWASP Cloud-Native Application Security Top 10 Flagship Project

Explore key security challenges and best practices for cloud-native applications, focusing on OWASP's top 10 vulnerabilities and mitigation strategies.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

OWASP Foundation

OWASP Flagship Projects - OWASP Security Knowledge Framework

Explore the OWASP Security Knowledge Framework, its features, and security lifecycle. Learn about OSS projects, demo labs, and expert wizards for enhancing application security.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

OWASP Foundation

OWASP Standard Classification - API Security Top 10 - A Beginner's Guide to Mitigation

Learn to mitigate API security risks using OWASP's Top 10 classification. Explore vulnerabilities, solutions, and strategies for implementing robust API security throughout the entire lifecycle.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

OWASP Foundation

OWASP Standard Classification - Achieving Security by Shifting Left in Agile

Integrating security into Agile development through persona-based stories, prioritization, and testing strategies to create more secure web applications and shift security left in SDLC.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Topics of Interest - React Native Security - Addressing Typical Mistakes

Explore React Native security, common pitfalls, and best practices. Learn to address risks, manage permissions, detect jailbreaks, and implement secure storage in mobile app development.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Temporal - Security As Code - The New Model Of Achieving Security At Scale

Explore the concept of Security-as-Code, a scalable approach to implementing security controls through codification, automation, and software engineering practices.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Temporal - Redefining Threat Modeling - Security Team Goes on Vacation

Explore innovative self-serve threat modeling techniques that empower development teams to identify and mitigate security risks independently, enhancing overall application security and efficiency.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

OWASP Foundation

OWASP SAMM 2 - Your Dynamic Software Security Journey

Explore OWASP SAMM 2, a dynamic framework for software security. Learn principles, assessment tools, and critical success factors to enhance your organization's security maturity.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk