OWASP Foundation Courses

The Path of Secure Software Development - AppSec EU 2017

Explore proactive security controls for developers to build safer applications. Learn techniques to address common vulnerabilities and integrate security throughout the development lifecycle.

• YouTube
• 37 minutes
• On-Demand
• Free Video

DevSecOps: Improving Security Posture Through Linguistic Theory

Exploring linguistic theory's impact on security practices, this talk examines how names and metaphors influence organizational processes and interactions to enhance security posture.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Security in the Land of Microservices - Challenges and Solutions

Explore security challenges in microservices architecture, including authentication, secret sharing, and API gateway patterns. Learn best practices for securing decoupled services in large-scale applications.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Securing the Continuous Integration Process

Explore best practices for integrating continuous integration securely into your software development lifecycle, focusing on technology and process changes rather than specific tools.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Continuous Patch and Security Assessment with InSpec

Discover InSpec: an open-source tool for automated infrastructure security testing. Learn to assess and enforce secure configurations across your IT fleet, integrating with CI/CD for continuous testing.

• YouTube
• 32 minutes
• On-Demand
• Free Video

Application Security for DevSecOps - Don't Learn, Don't See, Don't Run

Explore the future of DevSecOps with insights on seamless security integration, emerging technologies, and adoption strategies for the next three years in application development.

• YouTube
• 29 minutes
• On-Demand
• Free Video

Monitoring Attack Surface and Integrating Security into DevOps Pipelines

Explore methods for calculating and tracking web application attack surface, and learn to integrate security testing into CI/CD pipelines for effective DevOps practices.

• YouTube
• 27 minutes
• On-Demand
• Free Video

DevSecOps Roundup - An Overview of the Current State

Explore the current landscape of DevSecOps, examining key trends, challenges, and best practices in integrating security into the software development lifecycle.

• YouTube
• 18 minutes
• On-Demand
• Free Video

How to Put the Sec in DevOps - Integrating Security into Automated Software Deployment

Explore integrating security into DevOps processes, overcoming obstacles, enabling automation, and reaping benefits. Learn key strategies for successful AppSec implementation in continuous delivery environments.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Open Source Dependencies: Risks and Impacts - AppSec EU 2017

Explore the risks of open-source dependencies in software development, including potential impacts of code removal or malicious modifications on major organizations and applications.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Dangerous Optimizations and the Loss of Causality in C and C++ Programming

Explore compiler optimizations in C/C++ that can lead to software vulnerabilities. Learn about mitigation strategies and the importance of maintaining causality in code.

• YouTube
• 45 minutes
• On-Demand
• Free Video

Making Vulnerability Management Less Painful with DefectDojo

Streamline vulnerability management with DefectDojo: automate deduplication, reporting, and metrics for efficient AppSec programs. Learn how this open-source tool simplifies tedious tasks and enhances team productivity.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Looking Back to Look Ahead: Lessons for Securing Future Code and Systems

Explore the evolution of computing and its impact on security, drawing lessons from the past to safeguard future systems and code in our increasingly connected world.

• YouTube
• 26 minutes
• On-Demand
• Free Video

The Gift of Feedback - Enhancing Application Security

Discover how to implement next-generation security by leveraging feedback, pushing security left, and making it consumable. Learn strategies to engage developers and address the challenges of securing complex software workloads.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Printer Security - Vulnerabilities and Attacks

Comprehensive study on printer security vulnerabilities, revealing critical flaws in 20 printers. Introduces PRET, an open-source pentesting tool, and extends analysis to cloud printing services.

• YouTube
• 41 minutes
• On-Demand
• Free Video