Security Courses

IEEE

Dangerous Skills - Understanding and Mitigating Security Risks of Voice-Controlled Third-Party Functions on Virtual Personal Assistant Systems

Explore security vulnerabilities in virtual personal assistants, focusing on voice squatting and masquerading attacks. Learn about risks and mitigation strategies for third-party functions on smart speakers.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

IEEE

Understanding the Security of ARM Debugging Features

Comprehensive analysis of ARM debugging features' security implications across various platforms, exposing vulnerabilities and demonstrating the Nailgun attack to highlight potential risks.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

IEEE

Lay Down the Common Metrics - Evaluating Proof of Work Consensus Protocols' Security

Quantitative analysis framework for evaluating security of Proof of Work consensus protocols, revealing vulnerabilities and proposing improvements for blockchain systems.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk

IEEE

Deciding Equivalence Properties in Security Protocols - Theory and Practice

Automated verification of cryptographic protocols: new complexity results and decision procedures for static equivalence, trace equivalence, and labelled bisimilarity, with implementation in the DEEPSEC tool.

• YouTube
• 16 minutes
• Self-Paced
• Conference Talk

IEEE

Security Analysis of Emerging Smart Home Applications

Empirical security analysis of SmartThings smart home platform reveals design flaws leading to overprivilege and vulnerabilities in event subsystem, demonstrating potential risks in emerging IoT frameworks.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

IEEE

Security of the J-PAKE Password-Authenticated Key Exchange Protocol

Comprehensive security analysis of J-PAKE protocol, proving its robustness against various attacks and demonstrating its suitability for practical use in password-authenticated key exchange.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

IEEE

Connection-Oriented DNS to Improve Privacy and Security

Enhancing DNS privacy and security through TCP and TLS, addressing eavesdropping, spoofing, and DoS attacks while maintaining performance with careful implementation choices.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

IMSA

Math in Cyber Security

Explore the crucial role of mathematics in cybersecurity, uncovering its applications and importance in protecting digital systems and data.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

LASCON

API Security - Is it the New Application Attack Surface and How to Secure at Enterprise Scale

Explore API security challenges, threats, and enterprise-scale solutions. Learn about modern attack surfaces, recent breaches, and effective strategies for protecting sensitive data in API-driven architectures.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

LASCON

The Final Frontier - Automating Dynamic Security Testing

Automating dynamic security testing: strategies for efficient, scalable DAST integration in software delivery pipelines, addressing challenges and trade-offs for seamless DevSecOps implementation.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

LASCON

Being Powerful While Powerless - Elevating Security by Leading Without Authority

Strategies for implementing security measures and fostering a security-conscious culture as a lone security professional, emphasizing soft power, automation, and cross-departmental collaboration.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

LASCON

Cloud Security at Scale - Managing the Chaos

Explore the challenges and best practices for securely migrating large enterprises' legacy infrastructure to the cloud, with actionable insights for a successful transition.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

LASCON

The Battle to Address Mobile in the Endpoint Security Space

Explore mobile device security challenges, threats, and vulnerabilities in enterprise environments. Learn about the increasing importance of mobile security and strategies to protect against data breaches.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

LASCON

New Age Cloud Security - How to Build Secure Multi-Cloud Applications and Still Sleep Well

Learn to build secure multi-cloud applications with modern techniques. Explore industry trends, development phases, and essential components like TLS, DNS, user management, and data encryption for robust cloud security.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

LASCON

Lost in Translation - Communicating Outside of Security

Bridging the communication gap between security professionals and developers for successful DevSecOps adoption, with insights on common language and mutual understanding.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk