OWASP Foundation Courses

Magecart 2020 - The New Face of XSS

Explore Magecart's evolution, injection techniques, and threat complexity. Learn from real-world case studies and discover strategies to prevent these sophisticated web skimming attacks.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

MLSec Going Deeper

Explore advanced machine learning security concepts, including adversarial samples, attack strategies, and defensive techniques for various ML models.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Enabling Message Level Protection at Uber

Explore Uber's approach to message-level protection, including encryption strategies, crypto interfaces, and developer evangelism for secure data handling at scale.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Application Logging in the Era of GDPR

Explore GDPR-compliant application logging practices, data privacy laws, and effective strategies for protecting sensitive information in production logs.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Insider Threat Detection & Automation by Behaviour Analytics

Learn to detect and automate insider threat prevention using behavior analytics, exploring UEBA, anomalies, and data-driven techniques for enhanced cybersecurity.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

A Dancefloor that is Literally Just Banana Peels - AppSec Awareness Program Pitfalls

Explore common pitfalls in AppSec awareness programs and learn effective strategies for implementation, audience engagement, and sustainable security education.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Before It's Out the Door - Securing Outbound Open Source

Explore strategies for securing open-source projects before release, covering governance, code review, and infrastructure. Learn to address security concerns and manage community projects effectively.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

HTTP3 Security

Explore HTTP3 security with Robin Marx: handshakes, QuickSense, passive proxies, deep packet inspection, and QUIC vs TCP. Gain insights into the latest web protocol advancements.

• YouTube
• 1 hour 19 minutes
• On-Demand
• Conference Talk

Insecure Deserialization, and How Not to Do It

Explore secure deserialization techniques and common vulnerabilities with practical demos, focusing on session cookies and big vulnerabilities in various platforms.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

The Now and the Future of Malicious WebAssembly

Explore WebAssembly's evolution, performance, and security implications, including its use in cryptojacking and potential future developments in web-based attacks.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

OWASP Based Threat Modelling - Creating A Feedback Model in an Agile Environment

Learn to create an effective threat modeling feedback system in Agile environments using OWASP principles. Explore frameworks, processes, and strategies for risk management and application security.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Fast Forwarding Mobile Security With The OWASP Mobile Security Testing Guide

Explore mobile security essentials, including OWASP's Mobile AppSec Verification Standard and Testing Guide. Learn about network communication, data storage, and privacy requirements for robust app protection.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Breaches Are Everywhere - What’s A Good Security Leader To Do?

Explore strategies for security leaders to combat increasing breaches, from IoT vulnerabilities to phishing attacks. Learn essential skills and best practices for effective cybersecurity management.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Securing The Future

Explore the future of cybersecurity with Mikko Hypponen, covering topics like data value, governmental attacks, cyber warfare, and emerging technologies like deepfakes and machine learning for defense.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Restricting the Scripts, You're to Blame, You Give CSP a Bad Name

Explore Content Security Policy's role in web security, covering script restrictions, TLS enforcement, and framing control. Learn best practices and developer insights for effective CSP implementation.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk