Security engineering: from encryption to software architecture patterns

Cossack Labs and Teserakt are partner-companies that are internationally-recognized specialists in cryptography and data protection. Both companies have cryptographic R&D teams and offer software solutions for end-to-end encrypted data exchange, be it in IoT devices or between mobile apps, databases, and servers.This training is a result of the collaboration between experts from both companies. It combines the expertise of academic cryptographers, experienced software engineers, and security engineers.

Teserakt and Cossack Labs

This security engineering training teaches modern secure development and cryptography engineering practices to help you build more secure applications. 
Developers attending our class will gain a more security-oriented mindset, yet based on pragmatic decision-making and practical techniques.
Building software today entails protecting user data, but software security engineering skills are scarce and hard to attain. Being good at software development does not equal having good security skills, and following popular online checklists might not save from troubles.
You will learn about fundamental data security practices, including: secure software development lifecycle, risk and threat modelling, components of a security system, choosing and using cryptographic APIs, designing security features, managing data flow, protecting secrets and keys, and, for example, why turning on the “encryption” checkbox in AWS S3 buckets is insufficient.
 
<HR>
<H2>Content</H2>
<OL>
<LI>
Introduction into SSDLC (1h30): 
</LI>
<OL>
<LI>
Risk modelling, threats, trust.
</LI>
<LI>
Using SSDLC.
</LI>
<LI>
Components of security system (data protection, component security, process security, infrastructure security).
</LI>
<LI>
Principles of building security controls (reactive & proactive).
</LI>
</OL>
<LI>
Cryptography basics (1h30): 
</LI>
<OL>
<LI>
Randomness and random generators, and possible vulnerabilities.
</LI>
<LI>
Encryption and key agreement.
</LI>
<LI>
TLS best practices and TLS 1.3.
</LI>
<LI>
Common cryptography-related mistakes. 
</LI>
</OL>
<LI>
Cryptographic software (1h): 
</LI>
<OL>
<LI>
Overview of the libraries and APIs available.
</LI>
<LI>
Typical pitfalls and shortcomings.
</LI>
<LI>
Examples and recommendations on selecting most suitable crypto library.
</LI>
</OL>
<LI>
Secure architectures (1h30): 
</LI>
<OL>
<LI>
Secure architecture and planning.
</LI>
<LI>
Data security architectures (centralised, end-to-end encrypted, distributed trust).
</LI>
<LI>
Modelling, planning, assessing data flow and trust across all components.
</LI>
</OL>
<LI>
Protecting secrets (45min): 
</LI>
<OL>
<LI>
Passwords security and hashing (from PBKDF2 to Argon2).
</LI>
<LI>
Database encryption methods and overview of modern solutions.
</LI>
</OL>
<LI>
Q&A session
</LI>
</OL>
<H2> </H2>
<H2>Schedule</H2>
08:30-09:00 – Morning coffee 09:00-09:10 – Welcome intro 09:10-10:30 – Introduction into SSDLC 10:30-10:50 – Large coffee break 10:50-12:30 – Cryptography basics 12:30-13:30 – Lunch (included) 13:30-15:00 – Secure architectures 15:10-16:00 – Protecting secrets 16:00-16:20 – Large coffee break 16:20-17:20 – Cryptographic software 17:20-18:00 – Q&A
 
Lunch and coffee breaks are included in a ticket price. 
 
<HR>
 
<H2>Who will benefit from the training?</H2>
This training is best suited for software developers and solution architects that are responsible for building and maintaining applications (be it mobile or web), as well as security engineers, penetration testers, core-team engineers.
 
<H2>What do you get from the training?</H2>
<UL>
<LI>
Learn about SSDLC best practices and how using them can reduce security risks.
</LI>
<LI>
Understand the variety of existing security controls and their areas of use.
</LI>
<LI>
Learn the basic notions of modern cryptography and how to leverage them.
</LI>
<LI>
Choose the right crypto components and libraries for your products.
</LI>
<LI>
Know why and how to integrate cryptography in your applications.
</LI>
<LI>
Learn how to find and protect the weakest data security points across the whole data flow of your system. 
</LI>
<LI>
Understand how to improve the security of your system when planning new features. 
</LI>
<LI>
Top tips, tricks, and tool picks from our experts.
</LI>
</UL>
 
The training area is comfortable, coffee is good, and we might run blind testing of ukrainian vs swiss chocolate during break "Guess which chocolate is this".
 
<HR>
 
 
<H2>Trainers</H2>
Jean-Philippe (JP) Aumasson (@veorq), managing director at Teserakt. JP is well known for his work in cryptography including the reference book Serious Cryptography, the widely used algorithms BLAKE2 and SipHash, and talks at leading industry conferences. JP has been giving cryptography trainings since 2013 in multiple public and private settings.  
Anastasiia Voitova (@vixentael), product engineer at Cossack Labs. Anastasiia is a software engineer with a wide background, focused on cryptography/applied security. She maintains open-source cryptographic library Themis, conducts secure software development training, speaks at international conferences and co-organizes cyber-security events.
 
<H2>Having questions?</H2>
If you have any questions about content, group discounts, payment way – contact us.
Ping our trainers in twitter and we will help! Or write us at jp@teserakt.io anastasi@cossacklabs.com

Starling Hotel Lausanne

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}

Security engineering: from encryption to software architecture patterns

More events from Teserakt and Cossack Labs

Discover more events from Teserakt and Cossack Labs, from Science & Tech to other experiences you might love.

Security engineering: from encryption to software architecture patterns

More events from Teserakt and Cossack Labs

Discover more events from Teserakt and Cossack Labs, from Science & Tech to other experiences you might love.

You might also like...

Browse more events with different dates, prices, and formats to find your next great experience.