OWASP Foundation Courses

Leveraging the ASVS in the Secure Software Development Lifecycle

Integrating OWASP ASVS into the secure software development lifecycle to create uniform security requirements, prioritize tasks, and track adherence across applications using existing tools and processes.

• YouTube
• 38 minutes
• On-Demand
• Free Video

Exploring the Ecosystem of Malicious Domain Registrations in the .eu TLD

Extensive analysis of malicious domain registrations in .eu TLD, revealing cybercriminal tactics and campaign patterns. Insights into automated processes and operational aspects of large-scale malicious activities.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Creating an AppSec Pipeline with Containers in a Week

Explore the journey of setting up an AppSec pipeline using Docker containers, addressing challenges, managing false positives, and optimizing security tools for seamless integration with development teams.

• YouTube
• 36 minutes
• On-Demand
• Free Video

The Evil Friend in Your Browser - Browser Extension Security Risks

Explore the hidden dangers of browser extensions, their security model limitations, and potential risks to user privacy. Learn about real-world analysis findings and discuss improved security measures.

• YouTube
• 45 minutes
• On-Demand
• Free Video

How to Spend $3.6 Million on One Coding Mistake - OWASP BeNeLux Day

Explore infamous data breaches, their technical vulnerabilities, and preventive coding solutions. Learn practical techniques to enhance application security and avoid costly mistakes in your development process.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Monitoring Application Attack Surface and Integrating Security into DevOps Pipelines

Explore methods for calculating and tracking web application attack surface evolution, and learn to integrate security testing into CI/CD pipelines using metrics-based policies.

• YouTube
• 48 minutes
• On-Demand
• Free Video

Embedding GDPR into the Software Development Lifecycle

Practical guide to integrating GDPR requirements into software development lifecycle, covering privacy awareness, risk analysis, secure coding, threat modeling, and breach notification processes.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Securing C Code That Seems to Work Fine

Explore strategies for securing C codebases in high-performance environments, balancing best practices with startup culture. Learn from real-world successes and failures in implementing application security controls.

• YouTube
• 29 minutes
• On-Demand
• Free Video

Popular Approaches to Preventing Code Injection Attacks are Dangerously Wrong

Explores limitations of current code injection prevention methods and introduces Name Space Layout Randomization (NSLR) as a novel approach to secure Java applications against known and zero-day vulnerabilities.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Making Vulnerability Management Less Painful with OWASP DefectDojo

Streamline vulnerability management with DefectDojo: automate reporting, metrics, and scanner consolidation. Learn how this open-source tool can enhance your AppSec program's efficiency and effectiveness.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Detecting CSRF Vulnerability Reliably - Programmatic Approach

Explore a programmatic approach to reliably detect CSRF vulnerabilities in web applications, overcoming common shortcomings of existing tools and improving automated security testing.

• YouTube
• 42 minutes
• On-Demand
• Free Video

Measuring End-to-End Security Engineering

Introducing a new SDL approach: End-to-End Security Engineering. Covers full product lifecycle, defines 'perfect secure system', and produces metrics to measure security state at each point. Focuses on collective understanding and effectiveness.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Juggling the Elephants - Making AppSec a Continuous Program

Strategies for implementing a continuous AppSec program that integrates security initiatives, enables DevOps, and addresses portfolio-wide coverage while prioritizing risks and fostering continuous improvement.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Leveraging Blockchain for Identity and Authentication in IoT Security

Explore how blockchain technology can revolutionize identity and authentication in IoT, enhancing security through decentralized, immutable ledgers and innovative approaches to personal data management.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Dynamic Security Group Recommendations with Grouper and Dredge

Explore Netflix's innovative approach to AWS security group management using Grouper and Dredge, enhancing developer insights and ensuring least privilege network access.

• YouTube
• 31 minutes
• On-Demand
• Free Video