OWASP Foundation Courses

Building Secure Software With OWASP Tools and Guides

Explore OWASP's comprehensive tools and guides for building secure software throughout the development lifecycle, from policy creation to implementation and verification.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

What's New in TLS 1.3

Explore TLS 1.3's security enhancements, new protocol handshakes, and 0-RTT resumption. Learn about potential deployment pitfalls and how to avoid them in this comprehensive overview of the latest TLS version.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Optimize Your Pentesters Time

Optimize pentesting resources with Hunter, an open-source tool grading websites for low-risk security issues. Learn how eBay saved 10-15% of their pentesting budget and improved efficiency.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Lessons From the Threat Modeling Trenches

Insights from building threat modeling practices across organizations, focusing on reducing design errors. Explores lessons learned, challenges faced, and strategies for effective implementation in software security.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Digital Disease - How Healthcare Cybersecurity Challenges Can Claim or Save Lives

Explore healthcare cybersecurity challenges and their impact on patient safety. Learn how integrating clinicians with software developers can address risks in an increasingly connected medical landscape.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

A Tour of API Underprotection

Explore API security threats, protection techniques, and advanced strategies. Learn about OAuth2, static API keys, mobile security, certificate pinning, and emerging technologies to strengthen your API security posture.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Threat Modeling Toolkit

Explore threat modeling techniques for software security using a cryptocurrency ecosystem example. Learn to analyze potential attacks, actors, and countermeasures early in development.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

SecDevOps - Current Research and Best Practices

Explore current research and best practices in SecDevOps, covering static and dynamic analysis, security scaling, and infrastructure best practices for improved application security.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Applied Deception Beyond the Honeypot - Moving Past 101

Explore advanced deception techniques beyond honeypots for cybersecurity, drawing insights from military and political strategies to enhance defensive capabilities against diverse adversaries.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Prevention as a Business Strategy

Explore how prevention-focused cybersecurity strategies using AI and machine learning can protect businesses from evolving threats, reducing risks and costs associated with traditional detect-and-respond approaches.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

ReproNow - Save Time Reproducing and Triaging Security Bugs

Discover ReproNow, an open-source tool streamlining security bug reproduction and triage. Learn how this browser extension captures vulnerability walkthroughs, saving time for security engineers and enhancing bug bounty programs.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Leveraging Cloud SDNs to Solve OWASP Top Ten

Explore cloud SDN implementation for OWASP Top Ten security, featuring virtualized controls, service chains, and open-source technologies. Learn practical solutions for web security in virtual networks.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Unpoisoned Fruit - Seeding Trust into a Growing World of Algorithmic Warfare

Exploración de los desafíos éticos y de seguridad en la inteligencia artificial y el aprendizaje automático, enfocándose en la necesidad de transparencia y confianza en los sistemas algorítmicos para prevenir conflictos y desastres humanitarios.

• YouTube
• 1 hour 7 minutes
• Self-Paced
• Conference Talk

Costs of Coding to Compliance

Explore the challenges of coding for compliance, learn strategies to address security gaps, and discover how to prioritize initiatives for better risk management in application security.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Authentication Without Authentication

Explore IoT app authentication without user interaction. Learn innovative solutions for secure device communication, demonstrated on a Raspberry Pi.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk