OWASP Foundation Courses

Building & Hacking Modern iOS Apps

Explore iOS app security from both developer and hacker perspectives, covering secure development practices, vulnerability assessments, and insights into Apple's latest security features.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Testing and Hacking APIs

Learn techniques for testing and exploiting API vulnerabilities, including understanding implementation, detecting weak points, and conducting effective penetration tests on modern applications.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Once Upon a Time in the West - A Story on DNS Attacks

Explore DNS attack techniques used by notorious hacking groups, examining their tools and patterns to improve detection and defense strategies against evolving cyber threats.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Magecart - A Growing Threat to E-Commerce Sites

Explore Magecart's e-commerce threats, attack techniques, and defense strategies. Learn about vulnerabilities, compromises, and protective measures for online shops and payment systems.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Bringing Rapid Prototyping to the Threat Model Process

Discover rapid threat modeling for Agile/DevOps environments, enhancing software security design tenfold through efficient risk analysis and automated workflows.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

How Online Dating Made Me Better at Threat Modeling

Explore threat modeling through online dating, balancing privacy and human connection. Learn best practices for safer digital interactions and gain insights into core security principles.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Uninvited Guests - Understanding Malicious Web Bots with OWASP Handbook

Explore malicious web bots and automated threats using OWASP's Handbook. Learn about scalping, scraping, and sniping, with real-world examples and countermeasures for better online security.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Dissecting Mobile Application Privacy and Analytics

Explore mobile app data collection, privacy concerns, and analytics practices. Learn to assess and safeguard personal and client information in popular applications.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

What Do You Mean Threat Model Every Story

Explore integrating threat modeling into continuous development, focusing on methodology, developer education, and reflecting evolving systems in fast-paced environments.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

The Importance of the Cloud and the Developers Communities in Fighting Cyber Crime

Explore cloud and AI's role in cybersecurity, innovative trends, and Microsoft's strategies to combat evolving cyber threats in this insightful talk by a leading industry expert.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

DevSecOps with OWASP DevSlop

Learn DevSecOps through hands-on examples with OWASP DevSlop. Explore secure component management, secret handling, testing techniques, and open-source tools to enhance your pipeline security.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Common API Security Pitfalls

Explore common API security pitfalls, their root causes, and best practices for protection. Learn to assess and improve API security, focusing on authentication, encryption, and input validation.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Cyber Insurance - A Primer for Infosec

Explore cyber insurance: market growth, policy coverage, underwriting challenges, and its relevance to information security professionals. Gain insights into this evolving field and its impact on risk management.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Lessons Learned from the DevSecOps Trenches

Panel discussion on scaling AppSec programs, featuring insights from security leaders at major tech companies. Covers high-ROI efforts, effective tools, and lessons learned to help organizations improve their security practices.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

On the Frontlines - Securing a Major Cryptocurrency Exchange

Explore cryptocurrency exchange security challenges and innovative defenses against various attacks, from website vulnerabilities to blockchain issues, with insights from a leading security architect.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk