OWASP Foundation Courses

Top Ten Proactive Controls for Secure Software Development

Explore essential software security controls for developers, covering authentication, access control, validation, and more. Learn proactive strategies to build robust, secure applications.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

2013 AppSec Guide and CISO Survey - Making OWASP Visible to CISOs

Insights from OWASP's 2013 AppSec Guide and CISO Survey, focusing on application security governance, risk management, and investment strategies for Chief Information Security Officers.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

The Cavalry Is Us: Protecting the Public Good in the Internet of Things Era

Exploring cybersecurity challenges in the Internet of Things era and the need for collective action to protect public interests and safety in an increasingly connected world.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

OWASP Zed Attack Proxy: Latest Features and Developments - Lecture

Explore web application security with OWASP's Zed Attack Proxy. Learn key features, including Plug-n-Hack and Zest scripting, suitable for both novice and experienced penetration testers.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

WASPY Awards and OWASP Jeopardy - 2013

Celebrate web application security achievements and test your knowledge in this entertaining OWASP event featuring the WASPY Awards and an interactive Jeopardy-style game.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

OWASP PHP Security Project - Securing Web Applications with PHP Libraries and Tools

Explore secure PHP development with OWASP's project, featuring decoupled libraries and tools for enhanced web application security. Learn encryption, password management, and protection against common vulnerabilities.

• YouTube
• 1 hour 29 minutes
• Self-Paced
• Free Video

OWASP Media Project Introduction

Introduction to OWASP Media Project: Centralizing and promoting OWASP video content on an appealing hub, primarily through a dedicated YouTube channel.

• YouTube
• 17 minutes
• Self-Paced
• Free Video

Introduction to Emerging JSON-Based ID and Security Protocols

Explore emerging JSON-based identity and security protocols with Brian Campbell, focusing on JOSE and its applications in modern authentication and authorization systems.

• YouTube
• 1 hour 7 minutes
• Self-Paced
• Free Video

Firefox OS Security Model and Design Considerations

Explore Firefox OS security model and design considerations with Mozilla's Security Assurance team lead. Learn about building a mobile OS using browser technologies.

• YouTube
• 1 hour
• Self-Paced
• Free Video

Fishing for Security - Reeling in Phishing Attacks Across a Global Organization

Strategies to protect remote workforce from phishing attacks using SSO, biometrics, yubikeys, and device-based auth. Discusses implementation challenges and solutions for global organizations.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Reflections on Trust in the Software Supply Chain

Explore software supply chain security challenges, current efforts, and potential solutions. Evaluate SLSA, SBOM, code signing, and build tool chain security. Discuss binary-source validation as a promising approach.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Using an Application Performance Monitoring Environment for Security Insights

Explore how Application Performance Monitoring can enhance security by detecting anomalies, identifying threats, and providing real-time insights for proactive protection and incident response.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

The Evolution of Exploiting Memory Vulnerabilities in Linux

Explore the evolution of memory vulnerability exploitation in Linux, covering outdated techniques, binary hardening, and cutting-edge bypass methods, with real-world examples and statistical insights.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Zero Trust Threat Modeling - Implications for Application Security

Explore zero trust's impact on application security and threat modeling. Learn new design principles, threats, and approaches for effective zero trust threat modeling in modern environments.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Scaling Content Security Policy: Enterprise Compliance and Third-Party Resource Management

Learn to implement Content Security Policy and monitor web resources at scale, addressing supply chain attacks and PCI requirements for enhanced frontend security in enterprise applications.

• YouTube
• 43 minutes
• Self-Paced
• Free Video