OWASP Foundation Courses

Detecting and Defending Against State-Actor Surveillance

Explore state-sponsored surveillance techniques and learn effective detection and defense strategies against high-tech spying methods used by well-funded agencies.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk

Mobile Security Session

Explore mobile security risks, developmental controls, and industry best practices to build and maintain secure mobile applications with expert Jason Haddix.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

Securing the Future: Challenges and Innovations in Application Security

Insightful keynote address exploring cutting-edge application security trends, challenges, and best practices in the rapidly evolving digital landscape.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

Opening Remarks and Keynote on Application Security - 2022 Global AppSec San Francisco

Explore cybersecurity insights and industry trends with opening remarks and a keynote address by Anna Westelius at the 2022 Global AppSec San Francisco conference.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Application Security Best Practices - 2022 Global AppSec Keynote

Explore cutting-edge application security insights and strategies with industry expert Jim Manico in this thought-provoking keynote address from the 2022 Global AppSec conference.

• YouTube
• 1 hour 4 minutes
• Self-Paced
• Free Video

Cybersecurity Trends and Challenges - 2022 Global AppSec Keynote

Explore cutting-edge application security insights and trends with Simon Bennetts' keynote address at the 2022 Global AppSec conference in San Francisco.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Free Video

Squeezing the Last Drop Out of OWASP Juice Shop

Explore advanced hacking techniques and security challenges in this hands-on session with OWASP Juice Shop, led by its creator Bjoern Kimminich.

• YouTube
• 58 minutes
• Self-Paced
• Free Video

A Taste of Privacy Threat Modeling

Explore privacy threat modeling techniques to enhance application security and protect user data in this insightful presentation by Kim Wuyts.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

Introducing Threat Modeling to Established Teams

Learn effective strategies for implementing threat modeling in established teams, enhancing security practices and fostering a proactive approach to identifying potential vulnerabilities.

• YouTube
• 57 minutes
• Self-Paced
• Free Video

Attacking and Protecting Artificial Intelligence

Explore techniques for attacking and defending AI systems, focusing on security vulnerabilities and protective measures in machine learning applications.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

Why Winning in Cybersecurity Means Winning More Everyday

Explore strategies for daily cybersecurity victories and their impact on overall success in the field, emphasizing practical approaches to enhance digital defense capabilities.

• YouTube
• 58 minutes
• Self-Paced
• Free Video

Trusting Software: Runtime Protection as the Third Alternative

Explore runtime protection as a crucial alternative for software security, offering insights into its implementation and benefits for robust application defense.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

Passwordless Future: Using WebAuthn and Passkeys in Practice

Explore WebAuthn and passkeys for passwordless authentication, covering architecture, ceremonies, and usability improvements for a more secure online future.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

GitHub Actions: Vulnerabilities, Attacks, and Counter-Measures

Explore vulnerabilities, attacks, and countermeasures for GitHub Actions, enhancing your understanding of secure CI/CD practices and DevSecOps implementation.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

TOTPs Are Not As Secure As You Might Believe

Explore vulnerabilities in Time-based One-Time Passwords (TOTPs) and learn strategies to enhance their security in authentication systems.

• YouTube
• 45 minutes
• Self-Paced
• Free Video