OWASP Foundation Courses

Temporal - The Future of DevSecOps Transformation

Explore the future of DevSecOps transformation, covering Agile methodologies, new roles, maturity models, and innovative approaches to pipeline engineering and quality feedback.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Temporal - Code-Origin Policy - Towards a Formal User Privacy Protection for the Web

Explore a novel approach to web privacy protection through code-origin monitoring, offering customizable user safeguards and formal assurance mechanisms for JavaScript execution.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Temporal - Achieving the Web Isolation Nirvana - How Far Along Are We?

Explore web isolation's evolution, current approaches, and future challenges. Learn about a client-side sandboxing solution and discuss the future of web application security.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Temporal - Security As Code - The New Model Of Achieving Security At Scale

Explore the concept of Security-as-Code, a scalable approach to implementing security controls through codification, automation, and software engineering practices.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

Temporal - Redefining Threat Modeling - Security Team Goes on Vacation

Explore innovative self-serve threat modeling techniques that empower development teams to identify and mitigate security risks independently, enhancing overall application security and efficiency.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Temporal - AppSec Timeline - Wins, Failures, Promises, and Predictions

Explore AppSec's 20-year journey: achievements, setbacks, and future prospects. Analyze trends, evaluate DevSecOps impact, and gain insights into the evolving landscape of application security.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

AppSec - From Outsiders to Allies

Chris Wysopal explores AppSec's evolution from hacker-driven to a critical ally in software development, emphasizing the need for collaboration, shared accountability, and integrated security practices in modern development processes.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Extending WAFs at the Application Layer

Explore application-level security control with Sanwaf, an alternative to traditional WAFs. Learn its structure, datatypes, and implementation for enhanced web application protection.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Social Media Botnet Detection with Linkage Analysis and Machine Learning

Explore techniques for detecting social media spam botnets using linkage analysis and machine learning, covering unsupervised and semi-supervised approaches and their applications.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Why Developers Struggle with AppSec

Explore challenges developers face in application security, trust issues, and solutions for integrating security into the development process, with insights on tools and production biases.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Supplier Risk - Where OSS Collides With Vendor Management

Explore the intersection of open source software and vendor management, focusing on supplier risk, regulatory mandates, and strategies for mitigating potential threats in the software supply chain.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Yes, You Too Can Break Crypto - Exploiting Common Crypto Mistakes

Explore common cryptographic vulnerabilities and learn practical techniques to exploit them, enhancing your understanding of secure implementation and potential attack vectors.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Real Time Vulnerability Alerting by Using Principles from the United States Tsunami Warning Center

Learn how to implement real-time vulnerability alerting using principles from the US Tsunami Warning Center, covering triage methods, data analysis, and prioritization techniques.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

OWASP SAMM 2 - Your Dynamic Software Security Journey

Explore OWASP SAMM 2, a dynamic framework for software security. Learn principles, assessment tools, and critical success factors to enhance your organization's security maturity.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

OWASP IoTGoat Project Overview and Roadmap

Explore IoTGoat, an OWASP project for IoT security testing. Learn about hardware compatibility, vulnerabilities, and hands-on techniques like firmware extraction and password cracking.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk