Security Policies Courses and Certifications

Bill Buchanan OBE

Security Scan with Nessus - Comprehensive Guide

Learn to perform security scans using Nessus, covering policy creation, scanning techniques, and interpreting results for various systems including web servers and Windows.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Security BSides San Francisco

So You’re the First Security Hire - Creating a Security Program and Integrating Security into Your Company’s Culture

Guidance for pioneering security professionals on establishing a robust security program, integrating it into company culture, and balancing protection with business needs.

• YouTube
• 19 minutes
• On-Demand
• Conference Talk

LASCON

Practical Physical Security Advice for the Modern Enterprise

Practical advice on improving physical security, covering common weaknesses, bypass techniques, vulnerability mapping, and cost-effective solutions for modern enterprises.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Open Source Security Tools for Kubernetes Applications

Explore open-source tools for securing Kubernetes applications, covering image scanning, runtime security, and anomaly detection. Learn practical strategies for maintaining a secure cloud-native environment.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

IEEE

Micro-Policies - Formally Verified, Tag-Based Security Monitors

Explore formally verified tag-based security monitors for low-level policies. Learn about dynamic sealing, compartmentalization, control-flow integrity, and memory safety implementation.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

USENIX

STORM - Refinement Types for Secure Web Applications

STORM: A web framework for building MVC applications with compile-time enforcement of security policies, reducing trusted code to under 1% and providing static security enforcement with minimal overhead.

• YouTube
• 15 minutes
• On-Demand
• Conference Talk

RSA Conference

Using Automation to Help Achieve Security in a Multicloud Environment

Explore strategies for automating security in multicloud environments, focusing on critical components, tools, and data utilization to enhance operational security and inform decision-makers.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

RSA Conference

Security-as-Code to Accelerate DevSecOps - A Practical Guide to Get Started

Practical guide for implementing security-as-code in DevSecOps, covering automation of security policies, common barriers, and six steps to get started with this approach.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Improving FOSS Security

Learn best practices for managing security in open source projects, including vulnerability disclosure, patch management, and proactive measures for developers and maintainers.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Dev-Driven Automated Deployments Like a Cloud Native Pro - Even for Beginners

Discover automated Kubernetes deployments for developers and platform teams. Learn to streamline workflows, enhance security, and boost productivity using GitOps and open-source tools.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Making Remote Attestation Useful on Linux

Explore TPM remote attestation on Linux, its current limitations, and potential improvements for enhanced security and trust in boot processes.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Fine-grained Authorization in Containerized Environments Using Open Policy Agent

Explore fine-grained authorization using Open Policy Agent (OPA) for containerized environments, focusing on policy enforcement in Kubernetes without modifying core components.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Deep Dive into Landlock Internals

Explore Landlock's security sandboxing features, internals, and roadmap. Learn about access control, ruleset creation, and policy composition for enhanced system protection.

• YouTube
• 29 minutes
• On-Demand
• Free Video

BPF LSM - Updates and Future Developments

Explore BPF LSM's latest updates, real-world applications, and future developments. Learn about new features, case studies, and challenges in building advanced security policies.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Landlock Update: File Reparenting and Network Rules Support

Explore Landlock's latest updates: file reparenting improvements and new network access controls for enhanced app and container security in Linux systems.

• YouTube
• 40 minutes
• On-Demand
• Free Video