OWASP Foundation Courses

New Web Platform Security Features to Protect Modern Web Applications

Explore modern web browser security features to protect against XSS, CSRF, and clickjacking. Learn about CSP3, Trusted Types, Fetch Metadata Request Headers, CORP, and COOP for enhanced application security.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Security Culture - Fostering Hackers for Application Security

Explore strategies to foster a security-focused culture among IT professionals, emphasizing knowledge sharing, communication, and developer engagement to enhance application security and overall cybersecurity awareness.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

How NLP Can Help Us Understand Web Attackers - Applying Word2Vec to Web Application Security

Explore how NLP techniques like Word2Vec can be applied to web security, enabling better understanding of attack patterns, tool modeling, and enhanced threat detection.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Breaking Out of the Container Without Zero Day - Security Risks in DevOps

Explore container security risks in DevOps environments, focusing on potential vulnerabilities and attack vectors beyond zero-day exploits. Learn strategies to enhance container security and protect your infrastructure.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Threat Modeling of Containerized Applications - Three Levels of Complexity

Optimize threat modeling for containerized applications, focusing on efficiency, new dimensions, and real-world impact. Learn to measure success and implement incremental improvements in application security.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Looking Towards the Future of Open Source Vulnerability Management

Explore the evolving landscape of open source security, focusing on vulnerability management strategies, industry trends, and best practices for effective remediation and continuous security integration.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Docker Security Insights - Vulnerabilities and Best Practices

Explore Docker security vulnerabilities, countermeasures, and best practices for production environments. Learn about container risks, secrets management, content trust verification, and open-source library considerations.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

NOSQL Web Application Vulnerabilities and Mitigation

Explore NOSQL database vulnerabilities, including injection methods and CSRF, and learn mitigation strategies for enhanced security in web applications.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

The Evolving Community of Application Security

Explore the evolution of Application Security, its growing importance, and the role of the community in addressing future security challenges at scale.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Webhooks Hookups - Abusing API Developers

Explore the security risks of Webhooks in API development, including potential vulnerabilities, real-world examples, and preventive measures. Learn about a new toolkit for auditing Webhook exposure.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Rhyming with Hacks - The Ballad of Supply Chain Attacks

Explore supply chain attacks, their anatomy, and prevention strategies. Learn about real-life examples, existing solutions, and a new DOM monitoring approach with live demonstration.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Turning Engineers into Extended Blue Team Members - Security Strategies

Strategies for empowering engineers to become part of the security team, including threat modeling, incident-driven learning, and security testing integration into development processes.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Common Crypto Failures in Modern Applications - Beyond Bitcoin

Explore common cryptographic failures in digital currencies and their impact on security. Learn from real-world examples to understand the risks and importance of proper implementation.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Hacking Alexa and Cortana: Vulnerabilities in Voice Assistant Partnerships

Explore innovative "Evil Maid" attacks on Windows, vulnerabilities in Cortana-Alexa integration, and the challenges of merging new concepts with existing security mechanisms. Gain insights into AI and IoT security.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Bypassing Browser Policies and Privacy Extensions for Cookies

Explore bypasses to browser policies and extensions for cookie security. Learn about an automated framework for evaluating countermeasures against cross-site attacks and third-party tracking.

• YouTube
• 34 minutes
• Self-Paced
• Free Video