OWASP Foundation Courses

The Road to Free Certificates is Paved with Good Intentions

2 ratings

Exploring the journey towards free SSL/TLS certificates, this talk discusses the challenges, intentions, and implications of widespread HTTPS adoption for web security and privacy.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

Modern Application Security vs. GenAI Applications: Is Your AppSec Ready?

1 rating

Explore the intersection of modern application security and generative AI, assessing readiness for emerging challenges in the evolving tech landscape.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Profiling Socially-Motivated Cyber Criminals

1 rating

Explore the emerging threat of socially-motivated cyber criminals, their tactics, and impact on targets. Learn how to understand and defend against this new breed of networked adversaries in the digital landscape.

• YouTube
• 1 hour
• Self-Paced
• Free Video

Forensic Investigations of Web Exploitations

1 rating

Explore network forensics techniques and open-source tools for investigating web server compromises, analyzing captured traffic, and reconstructing malicious sessions to uncover digital evidence.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Breaches Are Everywhere - What's a Good Security Leader to Do

1 rating

Explore effective strategies for security leaders to combat widespread breaches, covering policies, monitoring, patching, and disaster recovery in today's threat landscape.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Mobile Security Track - AppSec Europe 2014

1 rating

Explore cutting-edge mobile security topics at AppSecEU 2014, covering iOS and Android vulnerabilities, OWASP Mobile Top Ten, smart storage scanning, and practical defense strategies for app developers.

• YouTube
• 6 hours 26 minutes
• Self-Paced
• Free Video

Mobile Application Security: OWASP MAS Developments and MASWE Introduction

Explore OWASP Mobile Application Security developments with project leaders as they introduce MASWE concepts, demonstrate analysis techniques, and showcase new test apps designed to enhance mobile security testing and vulnerability detection.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

The Next 25 Years of OWASP

Explore OWASP's 25-year journey, achievements, challenges, and future vision with Andrew van der Stock's perspective on what remains to be done in web application security.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

AI Under the Hood: Unmasking Hidden Threats

Explore a meta-analysis of 14 AI threat modeling frameworks, offering streamlined questions for AI/ML threat analysis and discussing how expert review refined this library for seamless integration into manual analysis.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Learning from Past Security Breaches: Strengthening AppSec Efforts and Focus

Explore real-world security breaches to understand proactive AppSec measures and effective post-incident remediation strategies for improving organizational resilience against future attacks.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

An Exploration of Container Escapes - Improving Security with Behavior Analysis

Explore innovative approaches to container security using behavior analysis during CI testing to generate native policies for Kubernetes, replacing manual definitions with automated, effective protection mechanisms.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

The Missing Link - How to Collect and Leverage SBOMs

Discover how to collect and leverage Software Bill of Materials (SBOMs) for enhanced vulnerability management, with real-world examples from Log4j and OpenSSL incidents.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Automatic Application Hardening by Leveraging Container Runtime Behavior Analysis

Discover how to improve containerized application security through runtime behavior analysis during CI processes, generating native policies for Kubernetes without third-party tools.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Practical Software Supply Chain Security Solutions

Discover practical strategies to defend against software supply chain attacks, including repo jacking, poisoning, typo squatting, and dependency confusion, as threats from nation states and ransomware gangs increase.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Maturing Your Application Security Program with ASVS-Driven Development

Discover how to mature your application security program using ASVS-driven development, turning security requirements into automated test cases and creating a common language across the SDLC.

• YouTube
• 45 minutes
• Self-Paced
• Free Video