Security Courses

Hack In The Box Security Conference

Underrated Security Bugs

Explore underrated security bugs through vulnerable code, exploitation examples, impact assessment, and bug-chain ideas.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

System-Level Threats - Assumptions in Modern Product Security

Examines system-level threats and the assumptions underlying modern product security.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Software Security Era - Past, Present, and Future

A high-level look at how memory-corruption exploitation evolved from classic buffer overflows to modern mitigation bypasses, with demonstrations of buffer and integer overflows.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Writing a New Decompiler for JRuby Security Audits

A security audit of poorly documented JRuby software leads to YBurj, a decompiler that recovers source code from compiled JRuby IR.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Strange Loop Conference

Using Data-Driven Metrics to Anticipate and Prevent Security Incidents

A product security team uses metrics, product pain points, and historical incident variants to anticipate incidents and reduce pressure on responders.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Cooper

Sbud - Information Visualization in Information Security

A short talk on information visualization in information security.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

GOTO Conferences

Concurrency Abstractions for Application Security

Could concurrency, isolation, and fault-tolerance abstractions make networked applications more secure, as automatic memory management did?

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Cooper

Exploring Data Collection, Analysis and Security - Hack.lu 2023

A Hack.lu 2023 talk exploring data collection, analysis, and security.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Enhancing Security with Mutual Authentication in Cilium Service Mesh

Learn how mutual authentication secures communication between microservices in Cilium Service Mesh, alongside Cilium network policies.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Kicking Security Chain Attacks to the Curb with Kyverno and Notary in GitOps

Shows how OCI referrers connect signed images and SBOMs to pre-deployment checks in GitOps using Notary, Kyverno, and ORAS.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Kubernetes on Bare-Metals or VMs: Using Virtink for Optimal Performance and Security

Virtink uses lightweight Cloud Hypervisor VMs to combine bare-metal efficiency with virtual machine isolation for hosting guest Kubernetes clusters.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Advancements in Harbor - Security, OCI Spec v1.1, and Performance Enhancement

Harbor’s latest release adds a layered vulnerability view, OCI distribution v1.1 support, and faster garbage collection and image pushes.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

The Security Evolution of gRPC Services in the Mesh

Trace how gRPC service communication security has evolved, including how Istio provides encryption and identity controls for service-to-service traffic in a mesh.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Cert-Manager: Enhancing Security and Flexibility of Istio Certificate Management

See how cert-manager automates Istio root CA certificate issuance and renewal through a PKI provider to strengthen zero-trust service communication.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Cooper

ACME - Benefits of an Internet Security Protocol in Your Network

Christophe Brocas presents the benefits of using ACME, an internet security protocol, in a network.

• YouTube
• 35 minutes
• Self-Paced
• Free Video