Homeland Security Courses

OWASP Foundation

Common API Security Pitfalls

Explore common API security pitfalls, their root causes, and best practices for protection. Learn to assess and improve API security, focusing on authentication, encryption, and input validation.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Running at Light Speed - Cloud Native Security Patterns

Explore cloud-native security patterns, including container isolation, control plane hardening, and network segmentation. Learn about authentication, authorization, and secrets management in cloud environments.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

OWASP Foundation

Battle Tested Application Security

Insights on building effective Application Security programs, focusing on security culture, defensive capabilities, and organizational empowerment across different environments.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Scratching the Surface of Your CD - Continuous Delivery and Application Security Challenges

Explore strategies for integrating continuous security testing into fast-paced Continuous Delivery environments, addressing challenges and streamlining processes for modern development workflows.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

OWASP Foundation

The Anatomy of a Secure Web Application in Java Using Spring Security and Apache Fortress

Practical guidance on implementing secure Java web applications using Spring Security and Apache Fortress. Covers authentication, authorization, and confidentiality controls with hands-on demos and code examples.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Security as a Service - Work Where You Engineers Live

Integrating security into existing development workflows for efficient vulnerability management and faster response times. Learn how to leverage automation and project tracking tools to enhance security practices.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Open Source Security Tools for Kubernetes Applications

Explore open-source tools for securing Kubernetes applications, covering image scanning, runtime security, and anomaly detection. Learn practical strategies for maintaining a secure cloud-native environment.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Making Security Approachable for Developers and Operators

Explore strategies to make security more accessible for developers and operators through APIs, secure-by-default platforms, and policy as code, enhancing overall security posture.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

OWASP Foundation

ReproNow - Save Time Reproducing and Triaging Security Bugs

Discover ReproNow, an open-source tool streamlining security bug reproduction and triage. Learn how this browser extension captures vulnerability walkthroughs, saving time for security engineers and enhancing bug bounty programs.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

OWASP Foundation

We Come Bearing Gifts - Enabling Product Security with Culture and Cloud

Explore innovative approaches to product security, emphasizing automation, cloud deployment, and engineering enablement. Learn how Netflix balances security impact with developer productivity.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Prove It! - Confronting Security With Data

Explore data-driven methods to measure and improve security capabilities in rapidly scaling businesses, focusing on quantitative strategies and decision analysis techniques.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Practical Dynamic Application Security Testing within an Enterprise

Practical implementation of dynamic application security testing in enterprise DevOps, showcasing CI/CD pipeline integration and large-scale scanning methods for enhanced security coverage.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

OWASP Foundation

How to Stop Worrying About Application Container Security

Learn how to embrace container security for sensitive workloads, exploring challenges, benefits, and best practices. Gain insights from a real-world journey of adopting containers in production environments.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Building a Culture of Security at The New York Times

Insights on building a culture of security at The New York Times, focusing on adapting to new challenges, fostering collaboration, and implementing practical strategies for newsroom protection.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Common REST API Security Pitfalls

Explore common REST API security pitfalls, their root causes, and best practices for protection. Learn to assess and improve API security for robust, future-proof applications.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk