OWASP Foundation Courses

The Next Generation in Biometrics - ECG

Explore the future of biometric technology with a focus on ECG (electrocardiogram) authentication, discussing its potential applications and implications for security.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Bot or Not? Mitigating Automated Threats to Web Applications

Explore automated threats to web applications and strategies for mitigating risks in this insightful presentation on cybersecurity challenges and solutions.

• YouTube
• 23 minutes
• On-Demand
• Free Video

Increasing Web Security with the Power of HTTP Headers

Explore how HTTP headers can enhance web security, focusing on practical implementation strategies and best practices for developers and security professionals.

• YouTube
• 17 minutes
• On-Demand
• Free Video

Leading Better Security Through Mini Hardening Projects

Discover how Mini Hardening competitions in Japan introduce security concepts to beginners, balancing technical challenges with business considerations in a one-day format.

• YouTube
• 31 minutes
• On-Demand
• Free Video

Everything Is Quantum - Cryptography in the Age of Quantum Computing

Explore quantum computing's impact on cryptography, data protection strategies, and government surveillance. Learn about current developments, projects, and future implications for cybersecurity.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Preventing Common Security Mistakes in the MEAN Stack - AppSec EU 2017

Learn to secure Angular applications by understanding common threats and implementing effective defenses. Covers script-based attacks, session management, CSRF, and more for robust client-side security.

• YouTube
• 40 minutes
• On-Demand
• Free Video

On the Insecurity of JavaScript Object Signing and Encryption - AppSec EU 2017

Comprehensive analysis of JavaScript Object Signing and Encryption (JOSE) security, revealing critical vulnerabilities in popular libraries and introducing JOSEPH, an automated evaluation tool.

• YouTube
• 45 minutes
• On-Demand
• Free Video

Analysis and Detection of Authentication Cross-Site Request Forgery - AppSec EU 2017

Explore seven strategies for detecting Authentication CSRF vulnerabilities, including a semi-automatic tool. Learn from real-world testing results on top websites and their security implications.

• YouTube
• 30 minutes
• On-Demand
• Free Video

How to Steal Mobile Wallet - Security Risks and Mitigation Strategies

Explores vulnerabilities in mobile contactless payments, demonstrating card cloning and discussing attack vectors, risks, and mitigation strategies for secure mobile wallet implementation.

• YouTube
• 52 minutes
• On-Demand
• Free Video

Pentesting Voice Biometrics Solutions - AppSec EU 2017

Explore pentesting techniques for voice biometrics, including tools for IVR automation, voice fuzzing, and bypassing algorithms. Learn security requirements and compare with traditional password methods.

• YouTube
• 47 minutes
• On-Demand
• Free Video

Exploiting CORS Misconfigurations for Bitcoins and Bounties - AppSec EU 2017

Explore CORS misconfigurations and their security implications, including real-world attacks on bitcoin exchanges and Google. Learn about subtle vulnerabilities and exploit techniques for web security professionals.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Security Best Practices in Azure Cloud

Hands-on overview of implementing security in Azure deployments, covering best practices for various services and secure .NET application deployment.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Combining Security Risks of Native and Web Development in Hybrid Apps - AppSec EU 2017

Explore security risks in hybrid app development, combining native and web technologies. Learn defensive programming and testing strategies for secure cross-platform mobile applications.

• YouTube
• 37 minutes
• On-Demand
• Free Video

DNS Hijacking Using Cloud Providers: No Verification Needed - AppSec EU 2017

Explore advanced domain hijacking techniques, including undisclosed methods, to understand vulnerabilities in DNS providers and cloud services. Learn to identify and mitigate risks beyond common subdomain takeover scenarios.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Fixing Mobile Application Security - The OWASP Mobile Project

Explore OWASP's Mobile Application Verification Standard and Security Testing Guide, addressing key mobile app security challenges and best practices for secure data storage, communication, and API usage.

• YouTube
• 39 minutes
• On-Demand
• Free Video