LASCON Talks & Presentations

LASCON

Multi Factor Authentication - Weeding Out the Snake Oil

Explore multi-factor authentication solutions, evaluation criteria, and implementation considerations for stronger security. Gain insights into market offerings and their credibility.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

LASCON

Be Mean to Your Code - Rugged Development & You

Pragmatic approaches and tools for ruggedizing your development lifecycle, from code commit to running system. Learn solutions for secure, resilient applications in fast-paced environments.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

LASCON

Breach Assessments - Are You Owned? You Can Find Out!

Discover techniques to detect ongoing network breaches, analyze anomalous behavior, and eradicate threats from Red Team experts turned Blue Team specialists.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

LASCON

Rugged Software Engineering

Practical strategies for rapid and secure software development, addressing challenges in modern engineering organizations and emphasizing rugged software practices.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

LASCON

No More Monkey Business - Quality Assurance in Penetration Testing

Explore quality assurance in penetration testing, addressing declining standards and providing guidance for improving security assessment practices and maintaining excellence in the field.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

LASCON

Penetration Testing - The Other Stuff

Explore tools and tips for effective penetration testing, from data collection to reporting, with insights on organization, documentation, and disaster recovery.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

LASCON

We Are the Cavalry - Why It Has to Be Us and Why Now

Exploring cybersecurity challenges in the Internet of Things era, emphasizing the need for proactive measures and collective responsibility to address emerging risks and protect human safety.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

LASCON

Big Data, Little Security - Practical Steps for Securing Big Data

Practical steps for securing big data installations, addressing challenges and vulnerabilities in velocity, variety, and volume. Explores security measures, authentication, and threat modeling.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

LASCON

From Gates to Guardrails - Alternate Approaches to Product Security

Exploring Netflix's innovative approach to product security, emphasizing automation, DevOps culture, and continuous assessment for agile development in cloud environments.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

LASCON

Million Browser Botnet

Explore how online advertising networks can be exploited to create massive browser botnets, enabling DDoS attacks, spam campaigns, and password cracking without leaving traces. Learn about the scalability and potential risks of this attack scenario.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

LASCON

Railsgoat - Rails Attack and Defense

Explore RailsGoat, an OWASP project for Rails security training. Learn common vulnerabilities, remediation techniques, and attack scenarios aligned with the OWASP Top 10 using a purposely vulnerable Rails application.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

LASCON

Minding the Gap - Secure PhoneGap Apps

Explore PhoneGap's security vulnerabilities, attack surfaces, and mitigation strategies for cross-platform mobile app development. Includes live demos, real-world examples, and practical recommendations.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

LASCON

Riding the Magical Code Injection Rainbow

Explore advanced exploitation techniques for SQL injection, XPath injection, cross-site scripting, and shell command injection using the Magical Code Injection Rainbow framework for configurable vulnerable applications.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

LASCON

Malware Automation

Explore automated malware production techniques, tools, and methodologies used by attackers to generate thousands of threats daily, including a live demonstration of the process.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

LASCON

Everything Useful I Learned About Software Security, I Learned at Microsoft

Discover key software security insights from Michael Howard's 18-year Microsoft journey, covering depreciation, friction reduction, network security, and practical strategies for robust development.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk