OWASP Foundation Courses

Introducing Graph Theory to Policy-As-Code

Explore graph theory application in Policy-As-Code using Checkov, focusing on relationships between cloud infrastructure resources and enhancing security through custom policies.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

OWASP Top 10 Privacy Risks 2021 - Understanding and Mitigating Web Application Privacy Threats

Explore OWASP's updated Top 10 Privacy Risks for web applications, covering vulnerabilities, consent issues, and data quality. Learn countermeasures to build a more private digital future.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

What Shall We Do With a Vendor SBOM? - Understanding Software Bill of Materials

Explore the practical applications of Software Bill of Materials (SBOM) in cybersecurity, covering procurement, vulnerability disclosure, threat intelligence, and forensics.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Good Bot, Bad Bot: Characterizing Automated Browsing Activity

Explore Aristeus, a system for deploying honeysites to study malicious bot behavior. Learn about bot traffic patterns, attack strategies, and the importance of understanding automated browsing activity for web security.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

How to Review Code for Vulnerabilities - OWASP Standard Classification

Learn effective strategies for identifying vulnerabilities through source code review, including key concepts, starting points, and automation techniques. Practice reviewing code samples to enhance your application security skills.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Everything You Always Wanted to Know About Fingerprinting Browser Extensions

Explore browser extension fingerprinting techniques, their implications for user privacy, and current browser defenses. Learn about DOM modifications, stylesheet hijacking, and web-accessible resources.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Threat Modeling the CI/CD Pipeline to Improve Software Supply Chain Security

Explore threat modeling for CI/CD pipelines to enhance software supply chain security, covering key vulnerabilities, data flow analysis, and mitigation strategies.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Security Chaos Engineering - Turning the Tide in the War on Uncertainty in Cyber Security

Explore security chaos engineering to proactively discover system weaknesses, increase confidence in security mechanisms, and move from subjective assessment to objective measurement through continuous experimentation.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Cyber Risk Success Criteria for Board and Executives - Birds and Buttons Approach

Discover effective strategies for communicating cyber risks to non-technical executives and board members. Learn key success criteria and insights from global CxOs to enhance your cybersecurity leadership skills.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Purple Teaming with OWASP PurpleTeam - Security Regression Testing

Explore OWASP PurpleTeam, a security regression testing tool for web apps and APIs. Learn its components, setup, and workflows for early detection of application security defects in build pipelines.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

DevSecOps in 2031: How Robots and Humans Will Secure Apps Together

Explore the future of DevSecOps in 2031, where humans and robots collaborate to secure applications. Learn about AI pair programming and innovative approaches to tackle evolving cybersecurity challenges.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

OWASP Standard Classification - Growing Your OWASP Chapter

Learn strategies for organizing and growing successful OWASP chapters from experienced leaders. Gain insights on best practices, common pitfalls, and effective techniques for building a thriving open-source software community.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Running a Local OWASP Chapter - Best Practices and Challenges

Insights into managing an OWASP chapter: attracting speakers, sponsors, and audience; organizing meetups; coordinating with OWASP Foundation; and balancing revenue with enjoyment.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Topics of Interest: Developers Struggle with Application Security and How to Make It Better

Explore challenges in application security for developers and learn strategies to improve DevSecOps practices, drawing from real-world experiences at major tech companies.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Securing the Build and Deployment Pipeline - Challenges and Best Practices

Explore challenges in securing build/deployment environments for agile development and DevOps. Learn about potential vulnerabilities in automated processes and strategies to maintain code integrity.

• YouTube
• 26 minutes
• Self-Paced
• Free Video