OWASP Foundation Courses

Taking on the King: Killing Injection Vulnerabilities - APPSEC Cali 2018

Explore strategies to combat injection vulnerabilities, including cross-site scripting, with insights on secure coding practices, framework design, and static analysis tools for improved application security.

• YouTube
• 54 minutes
• On-Demand
• Free Video

The Best Flaw Didn't Make It Into Production - Addressing Security Gaps in Development

Explore innovative approaches to address application security gaps, focusing on timely collaboration between security practitioners and development teams to influence secure coding practices.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Privacy Violations, Fines, and Economic Sanctions - Creating Darker Opportunities in Cybercrime

Explore privacy violations, fines, and economic sanctions in cybersecurity. Learn about EU GDPR implications, cyber crime opportunities, and how sanctioned countries exploit digital vulnerabilities for funding.

• YouTube
• 41 minutes
• On-Demand
• Free Video

A Free, Fair and Open Internet is a Process, Not a Product - Closing Keynote

Cory Doctorow explores the ongoing fight for a free, fair, and open internet, emphasizing its importance for freedom, privacy, and human rights. He urges continued engagement in this crucial process.

• YouTube
• 52 minutes
• On-Demand
• Free Video

Architecting for Security in the Cloud

Explore cloud security architecture, identifying vulnerabilities, and implementing robust defenses. Learn strategies to protect your applications from various attack vectors and ensure scalable, secure cloud deployments.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Edgeguard: Client-side DOM Security Framework for Detecting Malicious Content - APPSEC Cali 2018

Introducing Edgeguard: an open framework for detecting malicious content in browsers that steals sensitive user data. Learn about this zero-footprint library's approach to enhancing client-side DOM security.

• YouTube
• 40 minutes
• On-Demand
• Free Video

DevSecOps: Integrating People and Automation in Application Security

Explore DevSecOps principles, focusing on human aspects like collaboration, communication, and decision-making to enhance application security within real-world constraints.

• YouTube
• 48 minutes
• On-Demand
• Free Video

Navigating the Security Landscape of a Cloud-First World

Navigating cloud security challenges: shared responsibility, data protection, and enterprise ownership in the era of rapid cloud adoption. Strategies for maintaining security in cloud migrations.

• YouTube
• 31 minutes
• On-Demand
• Free Video

The Only Reason Security Matters for DevOps - APPSEC Cali 2018

Explore DevOps' impact on security, focusing on strategic business drivers, modern challenges, and practical recommendations for integrating security into DevOps using a simplified framework.

• YouTube
• 47 minutes
• On-Demand
• Free Video

European Vacation: Leveraging GDPR for Security

Explore how GDPR compliance can drive security initiatives and automate processes, turning a potential burden into a win for application security.

• YouTube
• 54 minutes
• On-Demand
• Free Video

Predicting Random Numbers in Ethereum Smart Contracts

Explore vulnerabilities in random number generation for Ethereum smart contracts, focusing on gambling applications. Learn to identify and build secure RNGs within blockchain limitations.

• YouTube
• 52 minutes
• On-Demand
• Free Video

OWASP Top 10 - Application Security Risks

Explore the latest OWASP Top 10 web application security risks with expert Andrew van der Stock. Learn about critical vulnerabilities and effective mitigation strategies for safer software development.

• YouTube
• 47 minutes
• On-Demand
• Free Video

Supply Chain Anarchy - Trojaned Binaries in the Java Ecosystem

Explore the security risks of third-party code in Java applications, focusing on potential discrepancies between source code and binaries. Learn about an automated security pipeline for detecting malicious differences.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Beyond End-to-End Encryption: Threat Models for Secure Messaging

Explore evolving threat models for secure messaging, covering advanced attacker capabilities, real-world vulnerabilities, and emerging challenges in cybersecurity and privacy protection.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Top 10 Security Best Practices for Securing Microservices

Comprehensive guide to securing microservices, covering TLS, authentication, authorization, DDoS protection, monitoring, encryption, and more. Essential for developers and architects building scalable, secure APIs.

• YouTube
• 38 minutes
• On-Demand
• Free Video