Security Courses

NDC Conferences

Transformation Blueprint for Developer-Centric Application Security

Practical guide for shifting to developer-centric application security, based on experience with 600+ teams. Covers mindset, tools, metrics, and practices adapted for modern development.

• YouTube
• 1 hour 4 minutes
• Self-Paced
• Conference Talk

NDC Conferences

Abusing GitHub for Fun and Profit - Actions and Codespaces Security

Explore security vulnerabilities in GitHub Actions and Codespaces, including real-world exploitation scenarios and practical tips for protecting your software supply chain and development pipelines.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

NDC Conferences

Architecting Fortresses - A Deep Dive into Advanced Security Measures for ReactJS Apps

Explore advanced security techniques for ReactJS, including XSS prevention, component attack surface analysis, and server-side rendering. Learn to build robust defenses and create more secure applications.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

NDC Conferences

Getting API Security Right

Explore best practices for securing APIs through real-world cases. Learn about attack surfaces, authorization issues, and actionable guidelines to enhance API security.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

NDC Conferences

Sandboxing .NET Assemblies for Fun, Profit and of Course Security

Explore techniques for sandboxing .NET assemblies to enhance application security, limit third-party library risks, and create restricted environments for external modules using AssemblyLoadContext.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

NDC Conferences

From App Security to Dev Security – Shift Left with GitHub Advanced Security

Discover how to integrate security seamlessly into your development workflow using GitHub Advanced Security, enhancing developer experience and reducing risks without compromising speed.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

NDC Conferences

A Data Driven Approach to Application Security

Explore strategies for managing security alerts from multiple sources, aggregating data, and transforming information overload into actionable insights for both team and company-wide application security.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

NDC Conferences

Security as Code - A DevSecOps Approach

Explore Security as Code methodology, integrating security into CI/CD pipelines for continuous vulnerability detection. Learn to implement CodeQL queries for early identification of security issues.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

NDC Conferences

Test Driven Application Security

Explore test-driven application security with automated tests to validate defenses. Learn to prevent OWASP TOP 10 vulnerabilities through clear requirements and security-focused testing in C# and ASP.NET Core 6.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

NDC Conferences

What I Learnt About Automating Security

Explore automation strategies for comprehensive cybersecurity, covering infrastructure, threat protection, cloud security, and proactive measures to address the growing skills gap in the industry.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

NDC Conferences

Building a Sustainable Security Requirements Process with the ASVS

Learn to integrate security requirements early in development using OWASP ASVS. Discover strategies for buy-in, prioritization, and maintaining a sustainable security process tailored to your organization's needs.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

NDC Conferences

How to Review Code for Security Issues

Learn to identify and prevent common security vulnerabilities during code reviews. Discover eight essential questions to ask and practice spotting issues in a real pull request example.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

NDC Conferences

Defendable Products - How We Try to Improve Security in Our Products

Schibsted's journey to enhance product security: guiding principles, priorities, solutions, and developer training. A blend of process insights and technical approaches.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

NDC Conferences

Cyber Security vs. Statistics - Fighting False Positives to Automate Your Security Operations

Strategies for automating security operations by correlating detections and leveraging statistical methods to reduce false positives and enhance incident response effectiveness.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Sundeep Saradhi Kanthety

X.509 Authentication Service Part 2 - Network Security

Explore X.509 authentication service in-depth, focusing on its role in network security and information protection protocols.

• YouTube
• 22 minutes
• Self-Paced
• Free Video