OWASP Foundation Courses

Innovation Fair for Application and Software Security Startups - OWASP Global AppSec Tel Aviv 2019

Explore innovative startups in application and software security at OWASP's first Innovation Fair. Early-stage companies pitch cutting-edge solutions, offering insights into emerging technologies and market trends.

• YouTube
• 1 hour 20 minutes
• Self-Paced
• Free Video

Automated Cyber Security Platform at Scale

Explore the vision and demo of an open-source Automated Security Platform, addressing sophisticated threats through security orchestration and automation to overcome data and process overload.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Software Bill of Materials (S-BoM) - Reducing Risk in Third-Party Components

Explore best practices for managing third-party component risks using software bill-of-materials (S-BoM). Learn to create S-BoMs, identify vulnerabilities, and automate security responses in polyglot environments.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

OWASP AppSecCali 2019 Welcome Address - Global Task Force and Innovations

Explore OWASP's global task force, key figures, and innovations in application security at AppSecCali 2019. Gain insights into the organization's global impact and leadership in setting industry standards.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

The Art of Vulnerability Management - Transforming Security Collaboration

Transforming vulnerability management from a nuisance to a collaborative process that drives accountability and transparency in software security through decentralization and empowerment.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Securing In-House Execution of Unsafe Third-Party Executables

Explore a framework for securely executing third-party code in production environments, addressing challenges and implementing best practices to mitigate risks associated with untrusted executables.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Authorization in Microservices World - Kubernetes, ISTIO and Open Policy Agent

Explore fine-grained authorization in microservices using Open Policy Agent, integrated with Kubernetes and ISTIO. Learn challenges and solutions for enforcing programmatic authorization in cloud-native environments.

• YouTube
• 54 minutes
• Self-Paced
• Free Video

Detecting Credential Compromise in AWS

Learn how to detect compromised AWS credentials without prior IP knowledge, crucial for preventing costly data breaches and infrastructure abuse in cloud environments.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Securing Third Party Applications at Scale - AppSecCali 2019

Learn best practices for securing third-party applications at scale, including tooling, processes, and manual reviews. Gain insights from Salesforce's experience in reviewing over 4000 AppExchange applications to prevent vulnerabilities.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

An Attacker's View of Serverless and GraphQL Apps

Explore attack vectors and security vulnerabilities in serverless and GraphQL applications from a red-team perspective. Learn practical exploitation techniques and defense strategies for modern distributed systems.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

Adding Privacy to Threat Modeling - Game On!

Explore how LogMeIn extended the Elevation of Privilege card game to incorporate privacy considerations, bridging knowledge gaps between development, security, and compliance teams through gamification.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

Node.js and NPM Ecosystem Security Stakes - Lightning Talk

Explore security initiatives in Node.js and NPM ecosystems, recent security reports, and measures taken to address vulnerabilities in modern software development.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Endpoint Finder: A Static Analysis Tool for Web Endpoint Discovery - Lightning Talk

Discover a static analysis tool for extracting web endpoints from JavaScript files, offering improved accuracy and reduced false positives compared to regex-based methods.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Creating Accessible Security Testing with ZAP - AppSecCali 2019 Lightning Talk

Introducing OWASP ZAP's Heads Up Display: A new UI that makes security testing more intuitive for developers and professionals, enabling efficient use of the attack proxy tool.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Slack App Security: Securing Workspaces from a Bot Uprising

Explore Slack app security, potential risks, and solutions for safeguarding workspaces. Learn about the app directory's history, unique security challenges, and Slack's efforts to enhance user protection.

• YouTube
• 32 minutes
• Self-Paced
• Free Video