OWASP Foundation Courses

The Road to Free Certificates is Paved with Good Intentions

2 ratings

Exploring the journey towards free SSL/TLS certificates, this talk discusses the challenges, intentions, and implications of widespread HTTPS adoption for web security and privacy.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

Breaches Are Everywhere - What's a Good Security Leader to Do

1 rating

Explore effective strategies for security leaders to combat widespread breaches, covering policies, monitoring, patching, and disaster recovery in today's threat landscape.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Profiling Socially-Motivated Cyber Criminals

1 rating

Explore the emerging threat of socially-motivated cyber criminals, their tactics, and impact on targets. Learn how to understand and defend against this new breed of networked adversaries in the digital landscape.

• YouTube
• 1 hour
• Self-Paced
• Free Video

Modern Application Security vs. GenAI Applications: Is Your AppSec Ready?

1 rating

Explore the intersection of modern application security and generative AI, assessing readiness for emerging challenges in the evolving tech landscape.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Tagging Your Code with a Useful Assurance Label

Learn to focus software vulnerability assessments on critical weaknesses across the development lifecycle, and create an "assurance tag" for binaries to enhance security efforts.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Why is SCADA Security an Uphill Battle

Explore SCADA security challenges, attacks, and protective measures. Learn about SCADA components, protocols, and real-world implementations. Gain insights for securing critical infrastructure and control systems.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Security Begins with Secure Development Environments

Explore supply chain security threats in development environments, focusing on vulnerabilities in Visual Studio Code extensions and their potential for remote code execution.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Common Application Security Mistakes Enabling Automated Attacks

Explore common security flaws enabling automated attacks on applications, including retail fraud and account takeovers. Learn from real-world examples and discover effective prevention strategies.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Kubernetes Security: Attacking and Defending K8s Clusters

Explore Kubernetes security through attack scenarios, defense strategies, and best practices. Learn to protect clusters using RBAC, audit logs, and network policies.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

How Security, Development, and Testing Can Work Together to Stop Recurring Vulnerabilities - OWASP Top 10

Explore strategies for integrating security, development, and testing to prevent recurring vulnerabilities in the OWASP Top 10, fostering collaboration and cultural change for secure software development.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Attacking Microservice Systems: Methods and Practical Tips

Discover methods and practical tips for attacking microservice systems, exploring new security architecture patterns and vulnerabilities specific to this increasingly popular design approach.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

vAPI: Vulnerable Adversely Programmed Interface - OWASP API Top 10

Explore and exploit API vulnerabilities using vAPI, a lab environment mimicking OWASP API Top 10 scenarios. Ideal for developers and penetration testers to understand and address common API security issues.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Post-DevOps: What Should We Shift-Left in Application Security?

Exploring post-DevOps challenges in AppSec, focusing on risk profiles, threat response architecture, and operational aspects to enhance security and quality in fast-paced development environments.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Automated Finding Correlation: SAST, DAST, and IAST Overlap in Application Security

Explore the overlap between SAST, DAST, and IAST scanning technologies, their effectiveness in detecting vulnerabilities, and the benefits of automated correlation for developers and security experts.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Scaling AppSec through Education

Strategies for scaling application security through developer education, addressing the imbalance between security teams and developers and emphasizing code review for early bug detection.

• YouTube
• 31 minutes
• Self-Paced
• Free Video