OWASP Foundation Courses

What the Kidnapping and Ransom Economy Teaches Us About Ransomware

Explore ransomware's parallels with real-world kidnapping, its economic dynamics, future trends, and strategies to combat this growing cyber threat in the digital age.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

The DevSecOps Playbook - From A Practitioner's Perspective

Practical guide to implementing DevSecOps, covering mindset shifts, automation, communication strategies, skill requirements, and collaborative tools for safer software development.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Creating an AppSec Pipeline With Containers in a Week - How We Failed and Succeeded

Explore the journey of implementing an AppSec pipeline using Docker containers, addressing challenges, solutions, and best practices for effective security integration in development workflows.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Incremental Threat Modeling

Learn incremental threat modeling techniques for complex projects, focusing on efficient security analysis without extensive initial time investment.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

The Ways Hackers Are Taking To Win The Mobile Malware Battle

Explore cutting-edge mobile malware techniques, security paradigms, and detection methods. Live demo showcases creation of undetectable malware, highlighting challenges in mobile security.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

DevOops - Redux

Comprehensive guide to securing DevOps environments, covering AWS hardening, monitoring, disaster recovery, GitHub security, and best practices for CI/CD tools and developer workstations.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Practical Static Analysis for Continuous Application Security

Explore practical static analysis techniques for continuous application security, from simple grep to custom tools, enhancing software development lifecycle with targeted security checks.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Using Language-Theoretics and Runtime Visibility to Align AppSec with DevOps

Explore LANGSEC methodology and RASP tools for aligning AppSec with DevOps, enhancing runtime security visibility, and addressing vulnerabilities beyond traditional techniques.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Cleaning Your Applications' Dirty Laundry with Scumblr

Learn about Scumblr, an open-source tool for application security at scale. Discover how Netflix uses it for vulnerability management, risk tracking, and automating security tasks in a dynamic cloud environment.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Next Gen Web Pen Testing - Handling Modern Applications in a Penetration Test

Explore modern web application security testing techniques, including HTTP/2, WebSockets, CORS, REST APIs, and Content Security Policy. Learn to adapt penetration testing methods for evolving technologies.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Threat Modeling With Architectural Risk Patterns

Explore efficient threat modeling using architectural risk patterns, emphasizing software-centric methods to enhance speed and consistency in identifying security risks across enterprise environments.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Why Hackers Are Winning The Mobile Malware Battle - Bypassing

Explore mobile malware challenges, hacker tactics, and bypassing techniques in this insightful talk on the evolving landscape of mobile security threats and defenses.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Bug Hunting on the Dark Side

Explore bug hunting techniques in dark web applications, focusing on real-world examples, cryptography, and common vulnerabilities to enhance your cybersecurity skills.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Compression Bombs Strike Back

Explore data compression risks, HTTP vulnerabilities, and server attack techniques in this comprehensive security analysis of compression-related threats.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

IoT Cornerstones of Security

Explore four cornerstones of IoT security, addressing challenges in constrained environments. Learn how to build security from the start, mitigate threats, and implement effective solutions for connected devices.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk