Homeland Security Courses

OWASP Foundation

Test Driven Security in the DevOps Pipeline

Learn to implement Test Driven Security in DevOps, focusing on baseline controls, continuous testing, and preventing common vulnerabilities through specific, actionable security practices.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Handling of Security Requirements in Software Development Lifecycle

Explore a unified process for handling security requirements in large companies, focusing on SecurityRAT tool for automated requirement management and issue tracking integration.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

OWASP Foundation

WAFs FTW! A Modern DevOps Approach to Security Testing Your WAF

Explore modern DevOps approach to security testing Web Application Firewalls (WAFs) using Framework for Testing WAFs (FTW). Learn objective WAF evaluation, rapid prototyping, and continuous testing strategies.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Cookie Security - Myths and Misconceptions

Debunking cookie security myths and exploring lesser-known facts about cookie attributes, including recent browser improvements for enhanced web application protection.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Pushing Left Like A Boss - Application Security Foundations

Discover application security foundations and learn to 'push left' in the software development lifecycle. Explore strategies from vulnerability scanning to red team exercises for a proactive approach to security.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Practical Static Analysis for Continuous Application Security

Explore practical static analysis techniques for continuous application security, from simple grep to custom tools, enhancing software development lifecycle with targeted security checks.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

OWASP Foundation

IoT Cornerstones of Security

Explore four cornerstones of IoT security, addressing challenges in constrained environments. Learn how to build security from the start, mitigate threats, and implement effective solutions for connected devices.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Closing the Security Talent Gap

Practical strategies to address the growing security talent gap, including partnerships with academia, promoting security in job roles, and fostering diversity in the field.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

OWASP Foundation

5 Steps to Drive Enterprise Software Security

Learn a disciplined five-step approach to implement enterprise-wide software security initiatives, addressing organizational challenges and ensuring productive application security efforts.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

OWASP Foundation

To Bounty or Not to Bounty - Security@ Insights from 500 Organizations

Insights from 500 organizations on vulnerability disclosure programs, analyzing key factors for success and providing a framework to assess program performance and impact.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Windows Phone App Security for Builders and Breakers

Explore Windows Phone app security for developers and testers, covering encryption, secure data handling, and protection against common vulnerabilities and attacks.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Security DevOps - Staying Secure in Agile Projects

Explore security integration in agile projects through dynamic depth, static depth, intensity, and consolidation axes. Learn practical DevOps techniques for maintaining security throughout development.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Scaling Security in Agile Scrum

Learn strategies for integrating security into Agile Scrum development, optimizing interactions between security and engineering teams, and fostering in-house security expertise for efficient monthly releases.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

OWASP Foundation

The Emperor’s New Password Manager - Security Analysis of Web-based Password Managers

Security analysis of web-based password managers, revealing vulnerabilities in features like one-time passwords and bookmarklets. Explores diverse root causes and provides guidance for improving password manager security.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Cloud Security at Scale and What it Means for Your Application

Explore Netflix's innovative cloud security strategies, including immutable servers, chaos engineering, and automated risk assessment tools, to enhance application security at scale.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk