OWASP Foundation Courses

Uninvited Guests - Understanding Malicious Web Bots with OWASP Handbook

Explore malicious web bots and automated threats using OWASP's Handbook. Learn about scalping, scraping, and sniping, with real-world examples and countermeasures for better online security.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Dissecting Mobile Application Privacy and Analytics

Explore mobile app data collection, privacy concerns, and analytics practices. Learn to assess and safeguard personal and client information in popular applications.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

What Do You Mean Threat Model Every Story

Explore integrating threat modeling into continuous development, focusing on methodology, developer education, and reflecting evolving systems in fast-paced environments.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

The Importance of the Cloud and the Developers Communities in Fighting Cyber Crime

Explore cloud and AI's role in cybersecurity, innovative trends, and Microsoft's strategies to combat evolving cyber threats in this insightful talk by a leading industry expert.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

DevSecOps with OWASP DevSlop

Learn DevSecOps through hands-on examples with OWASP DevSlop. Explore secure component management, secret handling, testing techniques, and open-source tools to enhance your pipeline security.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Common API Security Pitfalls

Explore common API security pitfalls, their root causes, and best practices for protection. Learn to assess and improve API security, focusing on authentication, encryption, and input validation.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Cyber Insurance - A Primer for Infosec

Explore cyber insurance: market growth, policy coverage, underwriting challenges, and its relevance to information security professionals. Gain insights into this evolving field and its impact on risk management.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Lessons Learned from the DevSecOps Trenches

Panel discussion on scaling AppSec programs, featuring insights from security leaders at major tech companies. Covers high-ROI efforts, effective tools, and lessons learned to help organizations improve their security practices.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

On the Frontlines - Securing a Major Cryptocurrency Exchange

Explore cryptocurrency exchange security challenges and innovative defenses against various attacks, from website vulnerabilities to blockchain issues, with insights from a leading security architect.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Preventing Mobile App and API Abuse

Explore mobile app and API security threats, countermeasures, and defense-in-depth techniques through a courier service's evolving security approach against malicious attacks.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Contact Center Authentication

Explore best practices for authenticating customers over the phone in contact centers, including research findings, common pitfalls, and innovative solutions for improved security and user experience.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Pose a Threat - How Perceptual Analysis Helps Bug Hunters

Innovative techniques for efficient bug hunting using perceptual analysis, serverless infrastructure, and machine learning to identify security vulnerabilities at scale.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Threat Model Every Story - Practical Continuous Threat Modeling Work for Your Team

Explore continuous threat modeling for agile teams, focusing on collaborative methodologies and the PyTM open-source tool to enhance product security throughout development.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Working with Developers for Fun and Progress

Practical strategies for building strong relationships with developers to create an impactful AppSec program, featuring competition-based training, tooling implementation partnerships, and codebase contributions.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Cache Me If You Can - Messing with Web Caching

Explore web caching vulnerabilities including Web Cache Deception, Edge Side Include Injections, and Web Cache Poisoning. Learn detection techniques and mitigation strategies for these emerging threats in application security.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk