OWASP Foundation Courses

Large-Scale Software Composition Analysis: Uncovering Vulnerable Dependencies in 600 Apps

Discover how OWASP Dependency-Check enabled large-scale Software Composition Analysis on hundreds of vendor-managed apps, addressing software supply chain risks and patch debt in just two months.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

Bots Gone Phishing - Defending Against Automated Attacks and Phishing

Explore techniques to defend against phishing bots using obfuscation and one-time tokens, increasing costs for attackers while protecting web applications and APIs from automated threats.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

How to Thwart Malicious Automation and Kick Bot Butt for $0

Learn to defend against malicious bots and automated attacks using free, open-source solutions. Gain insights on threat profiling, defensive tactics, and implementation strategies for effective cybersecurity.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Kubernetes Cluster Security and Usability: Best Practices and Common Pitfalls

Practical guide to securing Kubernetes clusters, covering common misconfigurations, scalable security approaches, and best practices for different deployment scenarios and threat models.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

Roadblocks for Content Security Policy (CSP) Implementation - Developer Challenges and Solutions

Explore challenges in implementing Content Security Policy (CSP) for web security, including complexity, legacy code, and browser support. Learn strategies to overcome obstacles and enhance CSP deployment.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Container Security: It's All About the Supply Chain

Explore container security as a supply chain lifecycle issue, focusing on integrating validation at multiple points to achieve assurance in the software development process.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

OWASP Leaders Meeting - Updates and Collaboration

Learn about OWASP's latest updates, share experiences, and discuss strategies to advance web application security. Connect with leaders across projects, chapters, events, and committees.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

OWASP API Security: Sufficient Logging and Monitoring for API Protection

Explore real-world examples and best practices for implementing sufficient API logging and monitoring to enhance security, observability, and incident response capabilities.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

OWASP Open Application Security Curriculum

Comprehensive overview of OWASP's initiative to develop an open, standardized application security curriculum for undergraduate and postgraduate education, addressing the skills gap in the security sector.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Automating IMDS Protection at Scale in AWS - Metabadger Tool Overview

Automate AWS IMDS protection with Metabadger: Learn to upgrade EC2 instances to IMDSv2, prevent SSRF attacks, and secure AWS credentials across multiple accounts without downtime.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Ending Injection Vulnerabilities

Learn how programming languages can prevent injection vulnerabilities by distinguishing trusted developer strings from potentially attacker-controlled input, ensuring safer handling of user values in sensitive contexts.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Securing Modern Applications and APIs Against Attacks

Explore effective API security strategies for modern applications, focusing on deep application knowledge and user behavior to protect against evolving threats in cloud-native architectures.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Who's in Control: Human or Machine? - Behavioral Detection in Cybersecurity

Explore advanced behavioral detection methods for protecting critical web APIs against sophisticated attacks, focusing on user behavior analysis and biometric detection techniques.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

How to Use Your Vulnerabilities to Train Developers on Security

Learn to leverage your vulnerabilities for targeted developer security training. Discover common coding mistakes, effective fix strategies, and how to create adaptive training plans using real-world examples.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

Security Observability 101 - Thinking Inside the Box

Explore security observability using Java Observability Toolkit (JOT) for runtime instrumentation, analyzing defenses, identifying vulnerabilities, and enforcing policies without coding.

• YouTube
• 51 minutes
• Self-Paced
• Free Video