OWASP Foundation Courses

Running a Local OWASP Chapter - Best Practices and Challenges

Insights into managing an OWASP chapter: attracting speakers, sponsors, and audience; organizing meetups; coordinating with OWASP Foundation; and balancing revenue with enjoyment.

• YouTube
• 28 minutes
• On-Demand
• Free Video

Topics of Interest: Developers Struggle with Application Security and How to Make It Better

Explore challenges in application security for developers and learn strategies to improve DevSecOps practices, drawing from real-world experiences at major tech companies.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Securing the Build and Deployment Pipeline - Challenges and Best Practices

Explore challenges in securing build/deployment environments for agile development and DevOps. Learn about potential vulnerabilities in automated processes and strategies to maintain code integrity.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Security Metrics: Protecting Our Digital Assets of the Future

Explore security metrics' evolution and importance in protecting digital assets, focusing on people, processes, and technology. Learn to establish effective frameworks for measuring cybersecurity program success.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Hack Your APIs in 15 Minutes or Less - Exploiting Shadow APIs and Data Vulnerabilities

Learn to identify and exploit API vulnerabilities, understand hacker techniques, and explore creative methods for data theft in this eye-opening talk on modern cybersecurity challenges.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Costly Mistakes in Serverless Computing

Explore common pitfalls in serverless computing and learn how to strengthen your cybersecurity posture when building cloud-based applications.

• YouTube
• 28 minutes
• On-Demand
• Free Video

AWS Misconfiguration from an Attacker's Perspective

Explore AWS misconfigurations from an attacker's perspective with security analyst Kavisha Sheth. Learn to identify and mitigate vulnerabilities in cloud environments for enhanced cybersecurity.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Software Security Engineering: Lessons from the Past to Fix the Future

Explore software security engineering strategies to eliminate known bugs and achieve 99.99% resilience against zero-day threats. Learn from past events to fix future security problems in applications.

• YouTube
• 39 minutes
• On-Demand
• Free Video

CSRF Defense Strategies - Not All Are Created Equal

Explore CSRF vulnerabilities, defense mechanisms, and their implementations. Learn about synchronizer token patterns, double submit cookies, and challenge-response systems for effective protection against CSRF attacks.

• YouTube
• 45 minutes
• On-Demand
• Free Video

Can AppSec Training Really Make Developers Security-Smart?

Explore the effectiveness of AppSec training for developers through a year-long survey, revealing surprising insights on knowledge retention and practical application in software security programs.

• YouTube
• 33 minutes
• On-Demand
• Free Video

DIY Command and Control for Fun and No Profit

Hands-on exploration of Command & Control botnets, providing insight into cybercriminal operations. Includes live malware demonstration for a realistic glimpse into this dark corner of the internet.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Free Video

The Cavalry Is Us - Cybersecurity Activism in the Internet of Things Era

Exploring cybersecurity challenges in IoT and the need for collective action. Calls for researchers and professionals to shape the future of digital security and address emerging threats.

• YouTube
• 47 minutes
• On-Demand
• Free Video

Surviving an Application DoS - Strategies and Open Source Defense Framework

Explore strategies to defend against Application-Level DoS attacks using a new open-source Node.js framework. Learn to identify threats, analyze traffic patterns, and implement active defense measures.

• YouTube
• 42 minutes
• On-Demand
• Free Video

Libinjection: From SQLi to XSS Detection - New Algorithm Introduction

Explore advanced techniques for detecting SQLi and XSS attacks using libinjection, a fast and accurate algorithm. Learn about its implementation, benefits, and future developments in web security.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Million Browser Botnet - Creating a JavaScript-Driven Browser Botnet for DDoS Attacks

Explore how online advertising networks can be exploited to create massive browser botnets for various malicious activities, including DDoS attacks and password cracking, without leaving traces.

• YouTube
• 48 minutes
• On-Demand
• Free Video