Security Courses

Security BSides San Francisco

Using Ancient Math to Speed Up Security Assessments of Windows Executables

Discover how to accelerate Windows executable security assessments using Euclidean Distance and Bayes Theorem, enabling rapid triage and efficient risk reduction in regulated environments.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Listen to Your Engine - Unearthing Security Signals from the Modern Linux Kernel

Exploring Linux kernel security signals through system call analysis, focusing on detecting privilege escalation, resource abuse, and side-channel attacks in cloud-native environments.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Moving Security from Cost Center to Revenue Generator

Discover strategies to transform security from a cost center to a revenue generator by communicating its value in financial terms and highlighting revenue enabled by effective security measures.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Overcoming Obstacles in Operationalizing Security - A Tale from the Trenches

Practical insights on implementing security strategies in startups, addressing challenges like limited budgets and talent shortage. Learn to anticipate obstacles and make sensible trade-offs in real-world scenarios.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

The SecDevOpronomicon - Arcane Secrets for Scaling Your Company’s Security

Uncover arcane secrets for scaling security efforts in fast-paced development environments. Learn high-value engineering techniques, custom analyses, and CI/CD pipeline integration to enhance SecDevOps practices.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

The End of Security Stupidity

Experts discuss the end of ineffective practices in information security, predicting a shift towards more meaningful certifications, better training, and effective solutions to combat cyber threats.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Fundamental Flaws in Security Thinking

Explore flaws in security thinking, examining historical assumptions and their impact on modern cybersecurity practices. Gain insights to improve organizational security strategies.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Look Ma, No Hands! - Decentralizing Security for Scale

Explore decentralizing security operations for scalability, empowering developers with tools and practices to integrate security seamlessly into their workflow.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Does DoD Level Security Work in the Real World?

Explore DoD-level security principles for private sector implementation, addressing common misconceptions and emphasizing foundational data protection concepts for effective cybersecurity strategies.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Abusing Security Products to Bypass Windows Protections

Unveiling critical vulnerabilities in security products that allow bypassing Windows protections. Explores impact, solutions, and provides a validation tool for system security.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Emerging Best Practices in Software Supply Chain Security - What We Can Learn from Google, the White House, OWASP, and Gartner

Explore emerging best practices in software supply chain security, analyzing guidelines from major organizations to compile key strategies for mitigating risks in deployment pipelines.

• YouTube
• 14 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Developing a Baseline Security Standard for Endpoint Devices

Explore the development of baseline security standards for endpoint devices in a Zero Trust Network implementation, focusing on OS security capabilities and threat vector identification.

• YouTube
• 11 minutes
• On-Demand
• Conference Talk

RSA Conference

How to Prepare Infrastructure for a War and Enable a Company's Security

Learn strategies for preparing infrastructure and ensuring business continuity during crises, drawing from MacPaw's experience operating in Kyiv during the Russian invasion of Ukraine.

• YouTube
• 45 minutes
• On-Demand
• Free Video

RSA Conference

We're Not Doomed! How to Successfully Manage Software Supply Chain Security

Discover strategies to enhance DevSecOps and protect against software supply chain attacks using real-world examples and the OSCAR framework. Learn to assess and improve your organization's security practices.

• YouTube
• 44 minutes
• On-Demand
• Free Video

RSA Conference

OWASP Top 10 Security Risks for Low-Code/No-Code

Explore security vulnerabilities in low-code/no-code apps, learn about the OWASP Top 10 list, and gain insights from real-world examples to enhance application security in modern development environments.

• YouTube
• 1 hour
• On-Demand
• Free Video