OWASP Foundation Courses

WAFs FTW! A Modern DevOps Approach to Security Testing Your WAF

Explore modern DevOps approach to security testing Web Application Firewalls (WAFs) using Framework for Testing WAFs (FTW). Learn objective WAF evaluation, rapid prototyping, and continuous testing strategies.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Federated Login CSRF

Explore federated login CSRF vulnerabilities in OpenID Connect and OAuth 2.0, examining attack scenarios, risks, and mitigation strategies for secure identity linking in web applications.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

An Agile Framework for Building GDPR Privacy and Data Protection Requirements into SDLC

Agile framework for integrating GDPR privacy and data protection requirements into software development lifecycle, using a tag-based approach to identify and implement necessary features efficiently.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Androsia - A Tool for Securing In Memory Sensitive Data

Innovative tool for securing sensitive data in Android apps through static analysis and bytecode transformation, enhancing defense-in-depth even after compromise.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Where We're Going, We Won't Need Passwords

Explore enterprise-wide multifactor authentication deployment, addressing technical challenges, user experience, and lessons learned for seamless workforce authentication across devices and legacy systems.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Building Secure ASP.NET Core MVC Applications

Explore ASP.NET Core MVC security features, including XSS and CSRF protection. Learn to build robust web applications with modular architecture and cross-platform compatibility.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Fixing Broken Enterprise Threat Models with OWASP Efforts - Commissioning AppSec Professionals for Real Change

Explore how OWASP projects can revolutionize enterprise threat modeling, addressing compliance issues, undefined attack surfaces, and risk distortions to create measurable security impact.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Crafting the Next-Generation Man-in-the-Browser Trojan

Explore next-gen Man-in-the-Browser trojans, their evolution, and defense strategies. Learn about advanced attack techniques, client-side defenses, and future cybersecurity challenges in this comprehensive talk.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Cookie Security - Myths and Misconceptions

Debunking cookie security myths and exploring lesser-known facts about cookie attributes, including recent browser improvements for enhanced web application protection.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Differences Between Web Application Scanning Tools When Scanning for XSS and SQLi

Investigates differences between web application scanning tools for XSS and SQLi, addressing challenges in modern web architectures and suggesting improvements for effective vulnerability detection.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Bug Bounty Programs - Successfully Controlling Complexity and Perpetual Temptation

Explore bug bounty programs with industry experts, covering implementation strategies, legal considerations, and best practices for effective vulnerability management and researcher collaboration.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Cryptography in the Age of Heartbleed

Cryptography expert discusses challenges in encryption, recent vulnerabilities in web protocols, and securing cryptographic software against sophisticated attackers, emphasizing the need for simplification.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

An Introduction to Quantum Safe Cryptography

Explore quantum-safe cryptography's importance as quantum computing threatens current encryption methods. Learn about new algorithms and projects ensuring long-term IT security in the post-quantum era.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Pushing Left Like A Boss - Application Security Foundations

Discover application security foundations and learn to 'push left' in the software development lifecycle. Explore strategies from vulnerability scanning to red team exercises for a proactive approach to security.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

What the Kidnapping and Ransom Economy Teaches Us About Ransomware

Explore ransomware's parallels with real-world kidnapping, its economic dynamics, future trends, and strategies to combat this growing cyber threat in the digital age.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk