OWASP Foundation Courses

OWASP Juice Shop - Sustainable Development Practices for Web Applications

Explore sustainable web app development with OWASP Juice Shop. Learn clean code, TDD, CI/CD, quality metrics, and mutation testing. Discover automation benefits and overcome challenges in JavaScript development.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Rise of the Machines: Automating Application Security Assessments - AppSec EU 2017

Explore automated security assessment techniques using Jenkins, HP Fortify, OWASP ZAP, and more. Learn how to efficiently scan and report vulnerabilities across diverse applications and platforms.

• YouTube
• 45 minutes
• On-Demand
• Free Video

Boosting the Security of Angular Applications

Boost Angular 2 app security: Learn about script-based threats, defenses, session management, CSRF, cookie flags, Authorization headers, and JWT tokens. Gain practical knowledge to effectively secure your applications.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Android Password Manager Security Analysis - AppSec EU 2017

Explore Android password manager security, common vulnerabilities, and best practices for protecting stored secrets. Learn about implementation pitfalls and design failures in popular apps.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Bypassing XSS Mitigations Via Script Gadgets - AppSec EU 2017

Explore a novel web hacking technique bypassing XSS mitigations using script gadgets. Learn how attackers can exploit legitimate JavaScript to execute malicious code, evading common security measures.

• YouTube
• 47 minutes
• On-Demand
• Free Video

Embedded Systems Security - Common Threats and Best Practices

Explore embedded system security threats, proactive controls, and best practices to protect interconnected devices from vulnerabilities and potential DDoS attacks.

• YouTube
• 35 minutes
• On-Demand
• Free Video

Long-Term Study on SSL/TLS Certificate Security - Analysis and Findings

Long-term study analyzing cryptographic keys' security, revealing vulnerabilities in SSL/TLS certificates and industry-wide issues in encrypted communications.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Content Security Policy Evolution: From Whitelists to Strict-Dynamic - AppSec EU 2017

Explore Content Security Policy evolution, including 'strict-dynamic' approach, real-world implementation challenges, and strategies to address recent bypasses of nonce-based policies.

• YouTube
• 35 minutes
• On-Demand
• Free Video

What Is a DevSecOps Engineer? - Roles, Skills, and Responsibilities

Explore the role of a DevSecOps Engineer, including skills, responsibilities, and career evolution for security professionals interested in integrating security into DevOps practices.

• YouTube
• 22 minutes
• On-Demand
• Free Video

Job Security in a DevSecOps World - Transitioning from Control to Value Creation

Explore transitioning from security control to business value creation in DevSecOps, addressing job security concerns and elevating security conversations to strategic levels.

• YouTube
• 20 minutes
• On-Demand
• Free Video

Security and the Self-Contained Unit of Software - AppSec EU 2017

Exploring security challenges in modern software development, focusing on self-contained components and shifting security features from infrastructure to application level.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Improving the Security of Software Defined Infrastructures - AppSec EU 2017

Explore security challenges in Software Defined Infrastructures, learn attack surfaces, vulnerability identification techniques, and remediation strategies for configuration management tools like Puppet or Chef.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Requirements Gathering for Successful DevSecOps Pipeline - AppSec EU 2017

Discover key requirements for implementing a security-focused automated development pipeline in your organization, addressing assessment, bottlenecks, training, metrics, and monitoring.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Integrating Security in Agile Projects - AppSec EU 2017

Practical guide on integrating comprehensive security programs into agile development, featuring a real-world case study and tips for organizations prioritizing security in their projects.

• YouTube
• 42 minutes
• On-Demand
• Free Video

SDLC for the DevSecOps Era - Adapting Application Security Techniques

Practical lessons on adapting application security techniques for agile development, covering lightweight controls, visibility, and measuring security maturity in modern DevOps environments.

• YouTube
• 32 minutes
• On-Demand
• Free Video