LASCON Talks & Presentations

LASCON

Security Testing - Is Automation Failing Us?

Explore the challenges of security testing automation and its impact on identity, privacy, and overall system protection in modern software development.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

LASCON

Speed with Confidence

Explore innovative approaches to security, balancing speed and confidence. Learn about shared responsibilities, data-driven decision-making, and adapting security practices to real-world challenges.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

LASCON

Threat Modeling for IoT Systems

Explore IoT security challenges and learn how to apply threat modeling to design and test more secure IoT systems, addressing risks in devices, web services, and client applications.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

LASCON

Secure Configuration in the Cloud

Explore secure configuration management in cloud environments, focusing on protecting sensitive assets, managing configuration secrets, and implementing best practices for DevOps security.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

LASCON

Connections - Eisenhower and the Internet

Explore the parallels between the Eisenhower Interstate System and the Internet, uncovering valuable lessons for cybersecurity and predicting the future of our digital infrastructure.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

LASCON

Running at Light Speed - Cloud Native Security Patterns

Explore cloud native security patterns for containerized microservices, covering multi-tenancy, authentication, authorization, and encryption. Learn architectural guidance for secure software design in cloud environments.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

LASCON

Building an AppSec Program from the Ground Up - An Honest Retrospective

Learn from a 2-year journey building an AppSec program, covering successes, failures, goal-setting, and execution. Gain insights on static analysis, threat modeling, metrics, and more for effective security implementation.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

LASCON

Adapting Your AppSec

Explore strategies for integrating application security into modern development processes without hindering progress. Learn about tooling, assessments, and agile methodologies for effective security implementation.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

LASCON

DevSecOps Without DevOps Is Just Security

Explore effective DevSecOps practices, emphasizing collaboration between security and DevOps teams. Learn prerequisites, case studies, and strategies for leveraging existing resources to enhance security integration.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

LASCON

Rethinking Role-Based Security Education

Strategies for developing role-based security education, focusing on high-risk teams, collaborative threat modeling, and contextualizing security hygiene to improve effectiveness and scalability.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

LASCON

Abusing Normality - Data Exfiltration in Plain Site

Explore stealthy data exfiltration techniques using everyday system objects and processes. Learn to identify and defend against sophisticated attacks that leverage normal-looking channels for malicious purposes.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

LASCON

How to Create and Cultivate Community within the Cybersecurity Industry

Explore strategies for fostering community in cybersecurity, focusing on gender diversity, professional development, and leadership. Learn to create inclusive environments and drive positive change in the industry.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

LASCON

IOT Assimilation - Resistance is Futile

Explore the future of IoT, from embedded sensors to quantum computing, and its impact on AI, autonomous vehicles, and augmented reality. Discover key industry trends and regulatory considerations.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

LASCON

Won't Somebody Please Think of the Data!

Strategies for protecting corporate data from internal threats, focusing on database security, GDPR compliance, and collaboration between engineering and operations teams.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

LASCON

It Was Broken When It Got Here - Security in Your Software Procurement Process

Explore strategies for ensuring security in third-party software procurement, including case studies of vulnerabilities and guidance for integrating security considerations into the purchasing process.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk