OWASP Foundation Courses

Topics of Interest - Common NGINX Misconfigurations That Leave Your Web Server Open To Attack

Explore common NGINX misconfigurations, their security implications, and remediation strategies. Learn to identify and fix vulnerabilities in web server setups through demos and expert insights.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Using Binary Search Algorithms for Blind SQL Injection

Explore efficient blind SQL injection techniques using binary search algorithms, enhancing penetration testing skills and applying programming knowledge to real-world security challenges.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

All Your Ether Belong to Us - Hacking Ethereum-Based DApps

Explore Ethereum-based DApp vulnerabilities, attack methods, and protection strategies. Learn about blockchain technology, smart contracts, and the security challenges in decentralized applications.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Temporal - The Future Is Simple - Introducing the CRE

Introducing the Common Requirement Enumeration (CRE) initiative: a unified framework linking security standards to simplify and integrate application security across domains and stakeholders.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Topics of Interest - React Native Security - Addressing Typical Mistakes

Explore React Native security, common pitfalls, and best practices. Learn to address risks, manage permissions, detect jailbreaks, and implement secure storage in mobile app development.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Topics of Interest - Automatic Vulnerability Remediation - The Trusted and Secure Road to Developer Happiness

Explore automatic vulnerability remediation's potential to expedite product releases, free up development resources, and enhance software security while addressing developer trust concerns.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Topics of Interest - Top 10 Challenges for DevSecOps

Explore the top 10 challenges in implementing DevSecOps, focusing on integrating security into DevOps processes for precise, usable data and reduced business risk.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Temporal - Bot or Human? Detecting Malicious Bots with Machine Learning in 2021

Explore advanced techniques for detecting sophisticated bots using machine learning, combining server-side and client-side signals, and leveraging supervised and unsupervised approaches for maximum accuracy.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Topics of Interest - Attacking the Microservice Systems - Methods and Practical Tips

Explore methods and practical tips for attacking microservice systems, focusing on security assessment approaches to identify vulnerabilities specific to this architecture.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Topics of Interest - An Attacker's View on APAC's 2021 Three Major Breaches

Explore an attacker's perspective on APAC's major 2021 breaches, analyzing causes and prevention strategies for enhanced cybersecurity awareness.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Temporal - It's Not Your Developers' Fault

Explore how software development evolution impacts security, from traditional methods to Cloud Native workloads, and why increasing breaches aren't solely developers' responsibility.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Temporal - The Future of DevSecOps Transformation

Explore the future of DevSecOps transformation, covering Agile methodologies, new roles, maturity models, and innovative approaches to pipeline engineering and quality feedback.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Temporal - Code-Origin Policy - Towards a Formal User Privacy Protection for the Web

Explore a novel approach to web privacy protection through code-origin monitoring, offering customizable user safeguards and formal assurance mechanisms for JavaScript execution.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Temporal - Achieving the Web Isolation Nirvana - How Far Along Are We?

Explore web isolation's evolution, current approaches, and future challenges. Learn about a client-side sandboxing solution and discuss the future of web application security.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Temporal - Security As Code - The New Model Of Achieving Security At Scale

Explore the concept of Security-as-Code, a scalable approach to implementing security controls through codification, automation, and software engineering practices.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk