OWASP Foundation Courses

All Your Ether Belong to Us - Hacking Ethereum-Based DApps

Explore how Ethereum-based decentralized applications work, identify common vulnerabilities, and learn how to attack and protect them.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Temporal - The Future Is Simple - Introducing the CRE

An introduction to the Common Requirement Enumeration, a semantic web linking application-security standards and guidelines across OWASP and other frameworks.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Topics of Interest - React Native Security - Addressing Typical Mistakes

Explore common React Native security mistakes, from insecure storage and permissions to dependency risks, jailbreak detection, and testing strategies.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Topics of Interest - Automatic Vulnerability Remediation - The Trusted and Secure Road to Developer Happiness

Explores how trusted automatic code remediation can fix security vulnerabilities while preserving application functionality and accelerating secure software releases.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Topics of Interest - Top 10 Challenges for DevSecOps

Explore ten recurring DevSecOps challenges and how to deliver precise, actionable security data within DevOps and CI/CD pipelines.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Temporal - Bot or Human? Detecting Malicious Bots with Machine Learning in 2021

Explore how modern bot detection engines combine browser, device, and behavioral signals with supervised and unsupervised machine learning to identify malicious bots.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Topics of Interest - Attacking the Microservice Systems - Methods and Practical Tips

Practical methods for assessing microservice architectures and finding vulnerabilities specific to their security patterns and attack surface.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Topics of Interest - An Attacker's View on APAC's 2021 Three Major Breaches

An attacker-focused review of three major APAC breaches reported in 2021, covering how the attacks occurred and ways to prevent similar incidents.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Temporal - It's Not Your Developers' Fault

An application security perspective on how software development evolved from the BlackBerry era to cloud-native workloads—and why security failures are not always developers’ fault.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Temporal - The Future of DevSecOps Transformation

This talk examines how DevSecOps transformation may evolve through new roles, maturity models, pipeline engineering, quality feedback, contextual learning, and metrics.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Temporal - Code-Origin Policy - Towards a Formal User Privacy Protection for the Web

A code-origin policy for monitoring JavaScript and formally assuring customizable web privacy protections at development time and runtime.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Temporal - Achieving the Web Isolation Nirvana - How Far Along Are We?

Explores two decades of web isolation and demonstrates transparent client-side sandboxing for untrusted code.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Temporal - Security As Code - The New Model Of Achieving Security At Scale

Explore security as code by codifying policies and applying software engineering practices across the security-control lifecycle.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Temporal - Redefining Threat Modeling - Security Team Goes on Vacation

Explores self-serve threat modeling through training and observation phases, enabling teams to continue the practice when the security team is away.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Temporal - AppSec Timeline - Wins, Failures, Promises, and Predictions

A 20-year review of application security’s wins and failures, examining DevSecOps, automation, shift-left practices, and trends shaping its future.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk