OWASP Foundation Courses

Threat Modeling with PASTA - Application Security Case Studies

Explore risk-centric threat modeling using PASTA methodology, with case studies in IoT, E-Commerce, and Mobile Applications. Learn to align design and coding techniques with application use cases and potential threats.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Secure DevOps Journey: A How-To Guide - From Waterfall to Agile to DevOps

Explore the transition from Waterfall to DevOps, focusing on organizational structure, processes, and security integration. Learn strategies for leading change and maintaining high velocity in software development.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Embedding GDPR Into the Secure Development Lifecycle

Practical guide to integrating GDPR requirements into software development lifecycle, covering privacy awareness, risk analysis, secure coding, and breach notification processes.

• YouTube
• 44 minutes
• On-Demand
• Free Video

The Evil Friend in Your Browser - Browser Extension Security Risks

Explore the security risks of browser extensions, their potential for data breaches, and the limitations of current security models. Learn about threat analysis and user protection strategies.

• YouTube
• 40 minutes
• On-Demand
• Free Video

The Dark Side of Search Engine Optimization Campaigns - AppSec EU 2017

Explores how threat actors exploit SEO techniques and web attacks to manipulate search engine rankings, evaluating campaign success and proposing detection and mitigation strategies.

• YouTube
• 35 minutes
• On-Demand
• Free Video

The Flaws in Hordes, The Security in Crowds - Crowdsourced Security Models

Explores the effectiveness of bug bounty programs in improving application security, discussing strategies for success and potential pitfalls to avoid. Examines trends in appsec automation and remaining challenges.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Introducing the OWASP ModSecurity Core Rule Set 3.0 - AppSec EU 2017

Explore OWASP ModSecurity Core Rule Set 3.0: installation, key concepts, and handling false positives for effective web application firewall protection against common attacks.

• YouTube
• 50 minutes
• On-Demand
• Free Video

Security Selfie: Sizing Up Your AppSec Program with New Metrics

Discover innovative metrics to evaluate and enhance your application security program's effectiveness, presented by Facebook's Security Engineering Manager.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Twubhubbook - Building an AppSec Program for Startups

Learn strategies for implementing an effective application security program in startups from GitHub security experts, focusing on automation and practical approaches to secure software development.

• YouTube
• 50 minutes
• On-Demand
• Free Video

AWS Survival Guide - Application Security Essentials

Discover essential strategies for securing applications in AWS environments, covering key concepts and best practices for cloud security from an experienced CTO and application security expert.

• YouTube
• 38 minutes
• On-Demand
• Free Video

Essential TLS Hardening for Better Web Security

Explore essential TLS hardening techniques for enhanced web security with Justin Mayer, founder of Monitorial.com. Learn practical strategies to identify and address potential vulnerabilities in your web applications.

• YouTube
• 53 minutes
• On-Demand
• Free Video

AppSec Pipelines and Event-based Security - Moving Beyond Traditional Security Testing

Explore event-based security and AppSec pipelines to enhance traditional security testing methods. Learn innovative approaches for improving application security from an experienced professional.

• YouTube
• 48 minutes
• On-Demand
• Free Video

Strategic Defense in Cybersecurity - OWASP AppSec CA 2017

Explore strategic defense in cybersecurity with insights from Kevin Cardwell, an expert consultant with extensive experience in banking, financial institutions, and government red team operations.

• YouTube
• 54 minutes
• On-Demand
• Free Video

Stealth Authentication: Preventing Information Leaks in Web Application Security - APPSEC CA 2017

Explore stealth authentication techniques to enhance web application security by preventing information leaks during the authentication process.

• YouTube
• 51 minutes
• On-Demand
• Free Video

HTTPS Security Headers: HSTS, TLS, HPKP, and CSP Implementation - APPSEC CA 2017

Comprehensive guide to implementing HTTPS using HSTS, TLS, HPKP, and CSP. Learn best practices for secure web communication from Salesforce security experts.

• YouTube
• 48 minutes
• On-Demand
• Free Video