Security Courses

LASCON

Security Testing - Is Automation Failing Us?

Explore the challenges of security testing automation and its impact on identity, privacy, and overall system protection in modern software development.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

LASCON

Running at Light Speed - Cloud Native Security Patterns

Explore cloud native security patterns for containerized microservices, covering multi-tenancy, authentication, authorization, and encryption. Learn architectural guidance for secure software design in cloud environments.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

LASCON

DevSecOps Without DevOps Is Just Security

Explore effective DevSecOps practices, emphasizing collaboration between security and DevOps teams. Learn prerequisites, case studies, and strategies for leveraging existing resources to enhance security integration.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

LASCON

Rethinking Role-Based Security Education

Strategies for developing role-based security education, focusing on high-risk teams, collaborative threat modeling, and contextualizing security hygiene to improve effectiveness and scalability.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

LASCON

It Was Broken When It Got Here - Security in Your Software Procurement Process

Explore strategies for ensuring security in third-party software procurement, including case studies of vulnerabilities and guidance for integrating security considerations into the purchasing process.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

LASCON

AppSec Pipelines and Event-based Security - Moving Beyond a Traditional Security Test

Strategies for scaling AppSec programs using automation, continuous health checks, and event-based security to keep pace with rapid software development and delivery in large organizations.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

LASCON

Information Security Risk Assessment - Lessons from the Front Lines

Practical insights on conducting Information Security Risk Assessments for software products, covering methods, tips, and lessons learned to identify and mitigate potential security risks.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

LASCON

IoT and the Security of That Mobile App - Mark Loveless

Explore IoT security vulnerabilities in mobile apps, focusing on common mistakes, attack vectors, and research techniques. Learn to identify and exploit weaknesses in device-to-cloud communication.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

LASCON

Your Security Tools Are Just a Stop-Gap to Secure DevOps

Secure DevOps: Beyond tools, focus on risk assessment, threat modeling, and custom security controls. Learn to integrate security effectively in CI/CD pipelines for robust application protection.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

LASCON

A Wake-Up Call - Information Security for Non-Profits, Foundations, and Charities

Exploring cybersecurity challenges for non-profits, this talk offers strategies to protect organizations, donors, and beneficiaries in the digital age, emphasizing unique sector needs and practical solutions.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

LASCON

Startup Security - Making Everyone Happy

Automating security for startups using open-source tools to integrate dependency, code, and infrastructure protection without impeding progress or increasing developer workload.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

LASCON

Security for DevOps

Learn to identify and prevent application abuse by understanding adversary tactics and implementing effective security architecture in DevOps environments.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

LASCON

Practical Physical Security Advice for the Modern Enterprise

Practical advice on improving physical security, covering common weaknesses, bypass techniques, vulnerability mapping, and cost-effective solutions for modern enterprises.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

LASCON

Go Purple! Adopt Purple Team Strategy to Augment Application Security Programs

Explore purple team strategies to enhance app security programs, bridging defensive and offensive approaches for effective collaboration and improved security outcomes.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

LASCON

A Physical Security Plan for Implementing ISO 27002

Explore physical security implementation for ISO 27002, covering human resources, asset management, and access control. Learn from real-world examples and gain insights on testing, remediation, and continuous improvement.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk