OWASP Foundation Courses

A Tour of API Underprotection

Explore API security threats, protection techniques, and advanced strategies. Learn about OAuth2, static API keys, mobile security, certificate pinning, and emerging technologies to strengthen your API security posture.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Threat Modeling Toolkit

Explore threat modeling techniques for software security using a cryptocurrency ecosystem example. Learn to analyze potential attacks, actors, and countermeasures early in development.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

SecDevOps - Current Research and Best Practices

Explore current research and best practices in SecDevOps, covering static and dynamic analysis, security scaling, and infrastructure best practices for improved application security.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Applied Deception Beyond the Honeypot - Moving Past 101

Explore advanced deception techniques beyond honeypots for cybersecurity, drawing insights from military and political strategies to enhance defensive capabilities against diverse adversaries.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Prevention as a Business Strategy

Explore how prevention-focused cybersecurity strategies using AI and machine learning can protect businesses from evolving threats, reducing risks and costs associated with traditional detect-and-respond approaches.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

ReproNow - Save Time Reproducing and Triaging Security Bugs

Discover ReproNow, an open-source tool streamlining security bug reproduction and triage. Learn how this browser extension captures vulnerability walkthroughs, saving time for security engineers and enhancing bug bounty programs.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Leveraging Cloud SDNs to Solve OWASP Top Ten

Explore cloud SDN implementation for OWASP Top Ten security, featuring virtualized controls, service chains, and open-source technologies. Learn practical solutions for web security in virtual networks.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Unpoisoned Fruit - Seeding Trust into a Growing World of Algorithmic Warfare

Exploración de los desafíos éticos y de seguridad en la inteligencia artificial y el aprendizaje automático, enfocándose en la necesidad de transparencia y confianza en los sistemas algorítmicos para prevenir conflictos y desastres humanitarios.

• YouTube
• 1 hour 7 minutes
• On-Demand
• Conference Talk

Costs of Coding to Compliance

Explore the challenges of coding for compliance, learn strategies to address security gaps, and discover how to prioritize initiatives for better risk management in application security.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Authentication Without Authentication

Explore IoT app authentication without user interaction. Learn innovative solutions for secure device communication, demonstrated on a Raspberry Pi.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

We Come Bearing Gifts - Enabling Product Security with Culture and Cloud

Explore innovative approaches to product security, emphasizing automation, cloud deployment, and engineering enablement. Learn how Netflix balances security impact with developer productivity.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Breaking Fraud and Bot Detection Solutions

Demystifying browser fingerprinting and user behavior tracking in fraud detection, exploring vulnerabilities, and demonstrating proof-of-concept attacks against these defense mechanisms.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

Prove It! - Confronting Security With Data

Explore data-driven methods to measure and improve security capabilities in rapidly scaling businesses, focusing on quantitative strategies and decision analysis techniques.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Building a Secure DevOps Pipeline

Learn strategies to integrate security into DevOps, automate testing, and scale AppSec programs. Discover real-world examples of successful implementation across various companies, improving software development speed and security.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Practical Dynamic Application Security Testing within an Enterprise

Practical implementation of dynamic application security testing in enterprise DevOps, showcasing CI/CD pipeline integration and large-scale scanning methods for enhanced security coverage.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk