OWASP Foundation Courses

Attacking Modern Web Technologies

Explore modern web vulnerabilities with top hacker Frans Rosén. Learn about exploiting postMessage, WebSockets, cloud misconfigurations, and more. Gain insights to enhance your web security knowledge.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

From Rogue One to Rebel Alliance - Building Developers into Security Champions

Learn to transform developers into security champions, scaling your AppSec efforts. Discover recruitment strategies, training techniques, and success metrics for building a robust security program within development teams.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Detecting and Preventing Malicious Domain Registrations in the .eu TLD

Análisis exhaustivo de registros de dominios maliciosos en .eu, explorando campañas cibercriminales y presentando un sistema de predicción para detectar y prevenir registros maliciosos antes de que causen daño.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Injecting Security Controls in Software Applications

Explore techniques for integrating security controls into software development, focusing on real-world examples, actionable advice, and verification methods to build more secure applications.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Can We Automate Security?

Explore Microsoft's CI/CD pipeline security tools and lessons learned, focusing on automation strategies to enhance product and service security in the development process.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

OWASP Top 10 for JavaScript Developers

Explore JavaScript vulnerabilities in OWASP Top 10, covering client and server-side issues with focus on modern frameworks and NodeJS. Learn prevention techniques for secure web development.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Protecting a High Profile Enterprise

Strategies for protecting high-profile enterprises, drawing from 20+ years of experience. Covers choosing the right security approach, application security's role, and effective management techniques.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Vehicle Security Trends - Implications for Automotive Suppliers

Explore automotive security trends, attack surfaces, and mitigation strategies for suppliers in the era of connected and autonomous vehicles. Learn about third-party risks and development process improvements.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Building & Hacking Modern iOS Apps

Explore iOS app security from both developer and hacker perspectives, covering secure development practices, vulnerability assessments, and insights into Apple's latest security features.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Testing and Hacking APIs

Learn techniques for testing and exploiting API vulnerabilities, including understanding implementation, detecting weak points, and conducting effective penetration tests on modern applications.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Once Upon a Time in the West - A Story on DNS Attacks

Explore DNS attack techniques used by notorious hacking groups, examining their tools and patterns to improve detection and defense strategies against evolving cyber threats.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Magecart - A Growing Threat to E-Commerce Sites

Explore Magecart's e-commerce threats, attack techniques, and defense strategies. Learn about vulnerabilities, compromises, and protective measures for online shops and payment systems.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Bringing Rapid Prototyping to the Threat Model Process

Discover rapid threat modeling for Agile/DevOps environments, enhancing software security design tenfold through efficient risk analysis and automated workflows.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

How Online Dating Made Me Better at Threat Modeling

Explore threat modeling through online dating, balancing privacy and human connection. Learn best practices for safer digital interactions and gain insights into core security principles.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Uninvited Guests - Understanding Malicious Web Bots with OWASP Handbook

Explore malicious web bots and automated threats using OWASP's Handbook. Learn about scalping, scraping, and sniping, with real-world examples and countermeasures for better online security.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk