OWASP Foundation Courses

Software Security 5D Framework - Evolution of Security Verification

Explore the OWASP Software Security 5D Framework and its impact on integrating security bugs into the software lifecycle, revolutionizing traditional assessment methods.

• YouTube
• 31 minutes
• On-Demand
• Free Video

Black Clouds and Silver Linings in Node.js Security

Explore Node.js security challenges and mitigation strategies. Learn from real-world incidents to build secure JavaScript applications and understand ecosystem responsibilities.

• YouTube
• 30 minutes
• On-Demand
• Free Video

Defending Cloud Infrastructures with Cloud Security Suite

Comprehensive tool for auditing AWS/GCP/Azure security, combining open-source capabilities with custom checks to enhance cloud infrastructure protection and address human error risks.

• YouTube
• 30 minutes
• On-Demand
• Free Video

Secure Coding Lessons for Mobile Apps - Insights from the Trenches

Explore common mobile app coding pitfalls, their real-world impacts, and learn effective strategies to enhance security. Includes demonstrations of attacker techniques and protective code samples.

• YouTube
• 31 minutes
• On-Demand
• Free Video

Trusted Types: End-to-End Injection Safety at Scale

Learn about Google's approach to achieving high-level XSS safety through integrated tools and developer-friendly practices, with insights on implementing similar security in open-source stacks.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Securing Node.js and JavaScript

Explore common security vulnerabilities in Node.js and JavaScript ecosystems, and learn effective strategies to protect your applications from potential attacks.

• YouTube
• 28 minutes
• On-Demand
• Free Video

New Web Platform Security Features to Protect Modern Web Applications

Explore modern web browser security features to protect against XSS, CSRF, and clickjacking. Learn about CSP3, Trusted Types, Fetch Metadata Request Headers, CORP, and COOP for enhanced application security.

• YouTube
• 30 minutes
• On-Demand
• Free Video

Security Culture - Fostering Hackers for Application Security

Explore strategies to foster a security-focused culture among IT professionals, emphasizing knowledge sharing, communication, and developer engagement to enhance application security and overall cybersecurity awareness.

• YouTube
• 25 minutes
• On-Demand
• Free Video

How NLP Can Help Us Understand Web Attackers - Applying Word2Vec to Web Application Security

Explore how NLP techniques like Word2Vec can be applied to web security, enabling better understanding of attack patterns, tool modeling, and enhanced threat detection.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Breaking Out of the Container Without Zero Day - Security Risks in DevOps

Explore container security risks in DevOps environments, focusing on potential vulnerabilities and attack vectors beyond zero-day exploits. Learn strategies to enhance container security and protect your infrastructure.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Threat Modeling of Containerized Applications - Three Levels of Complexity

Optimize threat modeling for containerized applications, focusing on efficiency, new dimensions, and real-world impact. Learn to measure success and implement incremental improvements in application security.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Looking Towards the Future of Open Source Vulnerability Management

Explore the evolving landscape of open source security, focusing on vulnerability management strategies, industry trends, and best practices for effective remediation and continuous security integration.

• YouTube
• 22 minutes
• On-Demand
• Free Video

Docker Security Insights - Vulnerabilities and Best Practices

Explore Docker security vulnerabilities, countermeasures, and best practices for production environments. Learn about container risks, secrets management, content trust verification, and open-source library considerations.

• YouTube
• 27 minutes
• On-Demand
• Free Video

NOSQL Web Application Vulnerabilities and Mitigation

Explore NOSQL database vulnerabilities, including injection methods and CSRF, and learn mitigation strategies for enhanced security in web applications.

• YouTube
• 30 minutes
• On-Demand
• Free Video

The Evolving Community of Application Security

Explore the evolution of Application Security, its growing importance, and the role of the community in addressing future security challenges at scale.

• YouTube
• 25 minutes
• On-Demand
• Free Video