OWASP Foundation Courses

Practical OWASP CRS in High Security Settings

Learn to implement OWASP Core Rule Set for high-security web applications, covering WAFs, ModSecurity, logging, whitelisting, and advanced protection techniques.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

How to Find and Prevent Entire Classes of Security Vulnerabilities

Learn techniques to identify and prevent security vulnerabilities through variant analysis, code navigation, and automation, using real-world examples and practical strategies.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Being Powerful While Powerless - Elevating Security By Leading Without Authority

Learn strategies for elevating security without formal authority, including technical approaches and cultural tactics to influence stakeholders and drive positive change in organizational security practices.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

The Security We Need - Designing Usable IoT Security

Explore usable IoT security design principles to create user-friendly, effective protection. Learn strategies for clear communication, secure defaults, and seamless integration of security measures.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Choosing the Right Static Code Analyzers Based on Hard Data

Learn to select effective static code analyzers using data-driven insights, exploring tool capabilities, integration, coverage, and result quality for improved software security.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

How Do JavaScript Frameworks Impact The Security Of Applications

Explore JavaScript frameworks' impact on application security, analyzing mitigation levels, case studies, and CSRF protection across popular frameworks like Meteor.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Modern and Secure IAM for Modern Applications

Explore modern IAM strategies for enhanced application security, covering OpenID, JSON Web Tokens, SAML, and FIDO protocols, with practical insights and a demo.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Controlled Mayhem With Cloud Native Security Pipelines

Explore cloud-native security pipelines, comparing traditional and modern approaches, while addressing challenges in container orchestration, access control, and CI/CD processes.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Web Apps vs Blockchain DApps - Tools, Vulns And Standards

Explore the security aspects of decentralized applications (DApps) and smart contracts, covering tools, vulnerabilities, and standards across the development lifecycle.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

The Woman Who Squashed Terrorists - When An Embassy Gets Hacked

Discover how a cybersecurity expert thwarted a terrorist hack on an embassy, exploring the incident's origins, diplomatic implications, and crucial lessons for global security.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Security Vulnerabilities Decomposition - Another Way to Look at Vulnerabilities

Explore security vulnerabilities decomposition, focusing on SQL injection, secure data handling, and design patterns for payment gateways and single sign-on. Learn practical security controls for secure development.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

The Insecurity Caused by Trusting Your Client-Side Storage

Explore vulnerabilities in client-side storage, including cookies and web storage, and learn exploit patterns and attack vectors to enhance web application security.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

The State of Credential Stuffing and the Future of Account Takeovers

Explore credential stuffing, account takeovers, and evolving cybersecurity threats. Learn about attack methods, defense strategies, and the future of online fraud prevention.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Applying Security Engineering Principles to Complex Composite Systems

Explore security engineering principles for complex systems, focusing on composite elements, interactions, and dependencies across the system lifecycle, illustrated with a Smart City transit example.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

XSS is Dead - We Just Don't Get It

Exploración crítica de la persistencia del XSS, analizando su historia, fracasos en su mitigación y factores que contribuyen a su continuidad. Se cuestiona su relevancia actual y se proponen reflexiones sobre el futuro de la seguridad web.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk