OWASP Foundation Courses

Don't Let Bug Bounty Kill Your AppSec Posture

Examines how bug bounty programs can affect an organization's application security posture.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Preventing Subdomain Takeover with OWASP Domain Protect

A talk on preventing subdomain takeover with OWASP Domain Protect.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Philosophizing Security in a Mobile-First World

A reflection on the meaning of security in a mobile-first world.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

OWASP Coraza: The Way to WAF in 2023

A conference talk on OWASP Coraza and its approach to web application firewalls in 2023.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

Incorporating Software Assurance with OWASP SAMM V2.1

A talk on strengthening software assurance with OWASP SAMM version 2.1.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

Supply Chain Security with Dependency Track

A conference talk on software supply chain security featuring Dependency-Track.

• YouTube
• 54 minutes
• Self-Paced
• Free Video

Shifting Security Everywhere

A talk on shifting application security across the work of building software.

• YouTube
• 1 hour 4 minutes
• Self-Paced
• Free Video

Removing Secrets to Make Mobile Apps More MASVS-Secure

Shows how to remove hardcoded secrets from mobile apps using remote secret storage, signed API requests, and defenses against tampering and interception.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Reducing Permissions Management Time While Protecting Users

An AppSec talk on reducing permissions management time while protecting users.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

AI-Assisted Coding: The Future - Between Challenges and Benefits

Explores the challenges and benefits shaping the future of AI-assisted coding.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

Threat Modeling In and For Your Organization

Examines threat modeling within an organization and for the organization’s broader needs.

• YouTube
• 58 minutes
• Self-Paced
• Free Video

Non-traditional Encryption Problems and Solutions - Lecture

Examines encryption problems conventional designs leave open, including deterministic, searchable symmetric, homomorphic, and queryable encryption approaches.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

A Weakness in Chrome and a New Hacking Technique

A talk on a weakness in Chrome and a new hacking technique.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

OpenSSL Deep Dive: The Good, Bad and Not-So-Ugly

A close look at OpenSSL’s good, bad, and not-so-ugly aspects.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Constructing a Dynamic CFG for EVM-Based Smart Contracts

A method for constructing dynamic control-flow graphs captures how EVM-based smart contracts execute.

• YouTube
• 30 minutes
• Self-Paced
• Free Video