OWASP Foundation Courses

Differences Between Web Application Scanning Tools When Scanning for XSS and SQLi

Investigates differences between web application scanning tools for XSS and SQLi, addressing challenges in modern web architectures and suggesting improvements for effective vulnerability detection.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Bug Bounty Programs - Successfully Controlling Complexity and Perpetual Temptation

Explore bug bounty programs with industry experts, covering implementation strategies, legal considerations, and best practices for effective vulnerability management and researcher collaboration.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Cryptography in the Age of Heartbleed

Cryptography expert discusses challenges in encryption, recent vulnerabilities in web protocols, and securing cryptographic software against sophisticated attackers, emphasizing the need for simplification.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

An Introduction to Quantum Safe Cryptography

Explore quantum-safe cryptography's importance as quantum computing threatens current encryption methods. Learn about new algorithms and projects ensuring long-term IT security in the post-quantum era.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Pushing Left Like A Boss - Application Security Foundations

Discover application security foundations and learn to 'push left' in the software development lifecycle. Explore strategies from vulnerability scanning to red team exercises for a proactive approach to security.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

What the Kidnapping and Ransom Economy Teaches Us About Ransomware

Explore ransomware's parallels with real-world kidnapping, its economic dynamics, future trends, and strategies to combat this growing cyber threat in the digital age.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

The DevSecOps Playbook - From A Practitioner's Perspective

Practical guide to implementing DevSecOps, covering mindset shifts, automation, communication strategies, skill requirements, and collaborative tools for safer software development.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Creating an AppSec Pipeline With Containers in a Week - How We Failed and Succeeded

Explore the journey of implementing an AppSec pipeline using Docker containers, addressing challenges, solutions, and best practices for effective security integration in development workflows.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Incremental Threat Modeling

Learn incremental threat modeling techniques for complex projects, focusing on efficient security analysis without extensive initial time investment.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

The Ways Hackers Are Taking To Win The Mobile Malware Battle

Explore cutting-edge mobile malware techniques, security paradigms, and detection methods. Live demo showcases creation of undetectable malware, highlighting challenges in mobile security.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

DevOops - Redux

Comprehensive guide to securing DevOps environments, covering AWS hardening, monitoring, disaster recovery, GitHub security, and best practices for CI/CD tools and developer workstations.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Practical Static Analysis for Continuous Application Security

Explore practical static analysis techniques for continuous application security, from simple grep to custom tools, enhancing software development lifecycle with targeted security checks.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Using Language-Theoretics and Runtime Visibility to Align AppSec with DevOps

Explore LANGSEC methodology and RASP tools for aligning AppSec with DevOps, enhancing runtime security visibility, and addressing vulnerabilities beyond traditional techniques.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Cleaning Your Applications' Dirty Laundry with Scumblr

Learn about Scumblr, an open-source tool for application security at scale. Discover how Netflix uses it for vulnerability management, risk tracking, and automating security tasks in a dynamic cloud environment.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Next Gen Web Pen Testing - Handling Modern Applications in a Penetration Test

Explore modern web application security testing techniques, including HTTP/2, WebSockets, CORS, REST APIs, and Content Security Policy. Learn to adapt penetration testing methods for evolving technologies.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk