OWASP Foundation Courses

Threat Modeling With Architectural Risk Patterns

Explore efficient threat modeling using architectural risk patterns, emphasizing software-centric methods to enhance speed and consistency in identifying security risks across enterprise environments.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Why Hackers Are Winning The Mobile Malware Battle - Bypassing

Explore mobile malware challenges, hacker tactics, and bypassing techniques in this insightful talk on the evolving landscape of mobile security threats and defenses.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Bug Hunting on the Dark Side

Explore bug hunting techniques in dark web applications, focusing on real-world examples, cryptography, and common vulnerabilities to enhance your cybersecurity skills.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Compression Bombs Strike Back

Explore data compression risks, HTTP vulnerabilities, and server attack techniques in this comprehensive security analysis of compression-related threats.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

IoT Cornerstones of Security

Explore four cornerstones of IoT security, addressing challenges in constrained environments. Learn how to build security from the start, mitigate threats, and implement effective solutions for connected devices.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

All Our APIs Are Belong to Us

Explores Snapchat's strategies to protect users from third-party API abuse, detailing server-side and client-side defenses, their effectiveness, and lessons learned in the ongoing security challenge.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Closing the Security Talent Gap

Practical strategies to address the growing security talent gap, including partnerships with academia, promoting security in job roles, and fostering diversity in the field.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

5 Steps to Drive Enterprise Software Security

Learn a disciplined five-step approach to implement enterprise-wide software security initiatives, addressing organizational challenges and ensuring productive application security efforts.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Myths of Threat Modeling - AppSec California

Debunking common misconceptions about threat modeling in software security, providing insights to initiate and improve this crucial design activity for better application protection.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

To Bounty or Not to Bounty - Security@ Insights from 500 Organizations

Insights from 500 organizations on vulnerability disclosure programs, analyzing key factors for success and providing a framework to assess program performance and impact.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Sinking Your Hooks in Applications

Techniques for automatically enhancing application security through code hooking and injection, demonstrated across Java, .NET, and Ruby frameworks without requiring developer intervention.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

The Node.js Highway - Attacks Are At Full Throttle

Explore Node.js security vulnerabilities, attack vectors, and best practices for safeguarding applications in this comprehensive overview of potential threats and defensive strategies.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Client-Side Protection Against DOM-Based XSS Done Right

Comprehensive overview of client-side protection against DOM-based XSS attacks, covering vulnerabilities, prevention techniques, and practical solutions for web security professionals.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Windows Phone App Security for Builders and Breakers

Explore Windows Phone app security for developers and testers, covering encryption, secure data handling, and protection against common vulnerabilities and attacks.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Security DevOps - Staying Secure in Agile Projects

Explore security integration in agile projects through dynamic depth, static depth, intensity, and consolidation axes. Learn practical DevOps techniques for maintaining security throughout development.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk