OWASP Foundation Courses

The Tales of a Bug Bounty Hunter - 10 Interesting Vulnerabilities

Explore 10 fascinating vulnerabilities discovered by a bug bounty hunter, offering insights into real-world security flaws and their implications for web application security.

• YouTube
• 50 minutes
• On-Demand
• Free Video

Building Secure Cloud-Native Applications with Spring Boot and Spring

Learn to build secure cloud-native applications using Spring Boot and Spring, focusing on best practices and techniques for robust, scalable, and protected software development.

• YouTube
• 39 minutes
• On-Demand
• Free Video

SecDevOps: A View from the Trenches

Explore SecDevOps implementation strategies and real-world challenges with insights from industry experience, focusing on practical approaches to integrate security into DevOps workflows.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Using Third-Party Components for Building Secure Software - AppSec EU 2016

Explore secure software development, third-party component risks, and maintenance strategies for effective vulnerability management in enterprise applications.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Systematically Breaking and Fixing OpenID Connect

Explore systematic vulnerabilities and fixes in OpenID Connect, covering attack types, threat models, and countermeasures for improved authentication security.

• YouTube
• 44 minutes
• On-Demand
• Free Video

2016 State of Vulnerability Exploits

Explore vulnerability exploits, their trends, and defense strategies in this comprehensive overview of the cybersecurity landscape, featuring insights on exploit kits and prioritization.

• YouTube
• 33 minutes
• On-Demand
• Free Video

Surviving the Java Serialization Apocalypse - AppSecEU 2016

Explore Java serialization vulnerabilities and learn effective mitigation strategies to protect your applications from potential attacks.

• YouTube
• 42 minutes
• On-Demand
• Free Video

The ABCs of Source-Assisted Web Application Penetration Testing

Learn advanced web application penetration testing techniques using source code analysis for improved vulnerability detection and assessment.

• YouTube
• 45 minutes
• On-Demand
• Free Video

Analyzing and Detecting Flash-Based Malware

Explore techniques for analyzing and detecting Flash-based malware, enhancing your cybersecurity skills and understanding of this prevalent threat vector.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Addressing Security Requirements in Development Projects

Learn effective strategies for integrating security requirements into development projects, covering artifact creation, requirement generation, filtering, and customization.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Leveling Up Your Application Security Program

Learn strategies to enhance your organization's application security program, focusing on key improvements and best practices for robust cybersecurity.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Don't Touch Me That Way - Mobile Application Security Best Practices

Explore secure mobile app development strategies and best practices to protect against common vulnerabilities and attacks in this insightful OWASP conference talk.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Using JIRA to Manage Risks and Security Champions Activities

Learn how to effectively manage risks and security champion activities using JIRA, enhancing your organization's application security practices and workflows.

• YouTube
• 57 minutes
• On-Demand
• Free Video

Framework Security: Hugging Developers Through Self-Defending Systems - AppSecEU 2016

Explore framework security strategies, self-defending frameworks, and developer-friendly approaches to enhance application security without code changes or performance impact.

• YouTube
• 38 minutes
• On-Demand
• Free Video

Hardening the Web Platform

Explore web platform security with Mike West's keynote on hardening techniques, challenges, and future directions for a more robust online environment.

• YouTube
• 46 minutes
• On-Demand
• Free Video