Security Courses

LASCON

Skating on Thin Ice - A Crash Course in Kubernetes and Security

Explore Kubernetes fundamentals, security challenges, and best practices for container orchestration in this crash course, covering clusters, data management, and potential pitfalls.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

LASCON

Monitoring Attack Surface and Integrating Security into DevOps Pipelines

Explore strategies for integrating security into DevOps pipelines, focusing on attack surface monitoring, automated testing, and merging static and dynamic results.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

LASCON

Doing Security in 100 Milliseconds - The Speed of Serverless Computing

Explore serverless computing's impact on security, covering key areas like software supply chain and attack detection. Learn practical approaches and see a demo of building and securing a serverless application.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

LASCON

Android Security, or This Is Not the Kind of 'Open' I Meant

Explore Android security vulnerabilities, reverse engineering techniques, and potential solutions with insights from Trustwave SpiderLabs expert Mike Park.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

LASCON

Messaging Security Using GlassFish & Open Message Queue

Explore messaging security in GlassFish and Open Message Queue, covering authentication, authorization, encryption, persistence, logging, and monitoring for robust enterprise messaging systems.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

LASCON

Security Evolution - Bug Bounty Programs for Web Applications

Explore the evolution of web security through bug bounty programs, focusing on Mozilla's experience, benefits, challenges, and ethical considerations.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

LASCON

Fixing XSS with Content Security Policy

Explore Content Security Policy (CSP) as a defense against XSS attacks, comparing CSP 1.0 and 2.0, and learn implementation strategies for enhanced web application security.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

LASCON

Keynote - Historical Lessons for Improving Cyber Security

Historical lessons for improving cybersecurity: outsiders' role in cryptography advances, attention to seemingly foolish ideas, and applying risk analysis from nuclear deterrence to cryptography.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

LASCON

Big Data, Little Security - Practical Steps for Securing Big Data

Practical steps for securing big data installations, addressing challenges and vulnerabilities in velocity, variety, and volume. Explores security measures, authentication, and threat modeling.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

LASCON

From Gates to Guardrails - Alternate Approaches to Product Security

Exploring Netflix's innovative approach to product security, emphasizing automation, DevOps culture, and continuous assessment for agile development in cloud environments.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

LASCON

Everything Useful I Learned About Software Security, I Learned at Microsoft

Discover key software security insights from Michael Howard's 18-year Microsoft journey, covering depreciation, friction reduction, network security, and practical strategies for robust development.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

LASCON

Security Automation in the Agile SDLC - Real World Cases

Explore real-world examples of implementing successful security automation in fast-paced Agile development environments, focusing on practical strategies and processes.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

LASCON

Getting Security Up to Speed with CI - CD

Automating security in CI/CD: Learn about Threadfix-Centric Application Security Architecture, challenges in AppSec testing, and leveraging QA regression for enhanced coverage.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

LASCON

Designing Flexibility in Software to Increase Security

Explore designing flexible software architecture to enhance security, adapt to changes, and prevent vulnerabilities. Learn from real-world examples and gain practical tips for writing better, more adaptable code.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

LASCON

Static Analysis Security Testing for Dummies and You

Demystifying Static Analysis Security Testing: Learn how SAST tools work, customize them for your needs, and integrate them into your development pipeline for improved application security.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk