Security Courses

Cloud Native Security Landscape - Key Areas and Strategies

Explore key areas of Cloud Native security: platform protection, user management, and software supply chain. Gain insights into securing control planes, managing access, and mitigating threats in the cloud landscape.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

State of SBOM Tools - Improving Software Supply Chain Security

Explore the current state of SBOM tools, discussing improvements, standards support, interoperability, and accuracy to enhance software supply chain security.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Introducing GitBOM: Tracking Software Dependencies and Improving Supply Chain Security

Explore GitBOM, an open-source scheme for tracking dependencies in software, enhancing security and transparency across languages and ecosystems. Learn implementation and benefits for your software supply chain.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

VEXing Open Source Security - Vulnerability Data for Everything

Explore the Vulnerability Exchange Format (VEX) standard for improving vulnerability management in open source projects and enterprise software security.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Implementing Container Privilege Escalation Detection Using eBPF for Cloud Native Security

Explore eBPF-based techniques for detecting and preventing container privilege escalation in cloud environments, with practical implementation examples and real-world applications.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Kubernetes Security After Pod Security Policies Removal

Explore Kubernetes security post-PSP removal, comparing Pod Security and external Admission Controllers for maintaining cluster security in the evolving landscape.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Security BSides San Francisco

Buying Security - A Client's Guide

Comprehensive guide for effective security program implementation, focusing on vendor selection, value optimization, and marketplace insights from both client and vendor perspectives.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

So You Think You Can Patch - The Game Show that Questions Your Security Assumptions

Explore the complexities of security patching through a game show format. Experts discuss challenges, policies, and solutions for effective patch management in modern enterprises.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

nullcon

Elements of a Successful Security Strategy - A Comprehensive Approach

Expert panel discusses key components of effective cybersecurity strategies, offering insights on comprehensive approaches to protect organizations from evolving threats and vulnerabilities.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

nullcon

Not So Famous Attack Vectors in the World of Smart Contract Security

Explore lesser-known smart contract vulnerabilities, bad coding patterns, and defensive strategies. Learn to identify and protect against overlooked attack vectors in blockchain security.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

nullcon

Why I Write My Own Security Tooling and Why You Should Too

Discover the benefits of creating custom security tools for research. Learn how this approach enhances understanding, improves vulnerability detection, and ultimately makes you a more effective security researcher.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

nullcon

Unlocking Security Collaboration With Cyber Threat Intelligence

Panel discussion exploring how CXOs can leverage cyber threat intelligence for enhanced security collaboration and proactive defense strategies in today's evolving threat landscape.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

nullcon

Cloud Security Posture Management & Threat Protection

Learn cloud security best practices, resource hardening, security posture tracking, and threat protection from industry experts. Gain insights on securing cloud resources and improving visibility.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

nullcon

DevSecOps - Automating Security in DevOps

Explore automating security in DevOps pipelines, integrating tools, creating a security culture, and preventing critical bugs through DevSecOps implementation and best practices.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

nullcon

CyberPhysical Systems Security - Trends, Challenges & Opportunities

Expert panel discusses trends, challenges, and opportunities in cyberphysical systems security, focusing on industrial control systems and IIoT in automotive and manufacturing sectors.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk