OWASP Foundation Courses

OWASP Flagship Projects - OWASP ModSecurity Core Rule Set

Explore OWASP ModSecurity Core Rule Set: web application firewall rules, paranoia levels, and project developments for enhanced security and threat protection.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

OWASP Standard Classification - API Security Top 10 - A Beginner's Guide to Mitigation

Learn to mitigate API security risks using OWASP's Top 10 classification. Explore vulnerabilities, solutions, and strategies for implementing robust API security throughout the entire lifecycle.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

OWASP Standard Classification - Rough Consensus - An OWASP Story

Explore OWASP's journey in establishing software security standards through rough consensus, highlighting challenges, achievements, and future directions in the field.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

OWASP Standard Classification - Achieving Security by Shifting Left in Agile

Integrating security into Agile development through persona-based stories, prioritization, and testing strategies to create more secure web applications and shift security left in SDLC.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Topics of Interest - Agile Threat Modeling with Open-Source Tools

Explore agile threat modeling using open-source tools to capture project risk landscapes efficiently. Learn about Threagile, a developer-friendly toolkit for continuous threat modeling in DevSecOps environments.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Topics of Interest - Common NGINX Misconfigurations That Leave Your Web Server Open To Attack

Explore common NGINX misconfigurations, their security implications, and remediation strategies. Learn to identify and fix vulnerabilities in web server setups through demos and expert insights.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Using Binary Search Algorithms for Blind SQL Injection

Explore efficient blind SQL injection techniques using binary search algorithms, enhancing penetration testing skills and applying programming knowledge to real-world security challenges.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

All Your Ether Belong to Us - Hacking Ethereum-Based DApps

Explore Ethereum-based DApp vulnerabilities, attack methods, and protection strategies. Learn about blockchain technology, smart contracts, and the security challenges in decentralized applications.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Temporal - The Future Is Simple - Introducing the CRE

Introducing the Common Requirement Enumeration (CRE) initiative: a unified framework linking security standards to simplify and integrate application security across domains and stakeholders.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Topics of Interest - React Native Security - Addressing Typical Mistakes

Explore React Native security, common pitfalls, and best practices. Learn to address risks, manage permissions, detect jailbreaks, and implement secure storage in mobile app development.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Topics of Interest - Automatic Vulnerability Remediation - The Trusted and Secure Road to Developer Happiness

Explore automatic vulnerability remediation's potential to expedite product releases, free up development resources, and enhance software security while addressing developer trust concerns.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Topics of Interest - Top 10 Challenges for DevSecOps

Explore the top 10 challenges in implementing DevSecOps, focusing on integrating security into DevOps processes for precise, usable data and reduced business risk.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Temporal - Bot or Human? Detecting Malicious Bots with Machine Learning in 2021

Explore advanced techniques for detecting sophisticated bots using machine learning, combining server-side and client-side signals, and leveraging supervised and unsupervised approaches for maximum accuracy.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Topics of Interest - Attacking the Microservice Systems - Methods and Practical Tips

Explore methods and practical tips for attacking microservice systems, focusing on security assessment approaches to identify vulnerabilities specific to this architecture.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Topics of Interest - An Attacker's View on APAC's 2021 Three Major Breaches

Explore an attacker's perspective on APAC's major 2021 breaches, analyzing causes and prevention strategies for enhanced cybersecurity awareness.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk