OWASP Foundation Courses

The Anatomy of a Secure Web Application in Java Using Spring Security and Apache Fortress

Practical guidance on implementing secure Java web applications using Spring Security and Apache Fortress. Covers authentication, authorization, and confidentiality controls with hands-on demos and code examples.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Security as a Service - Work Where You Engineers Live

Integrating security into existing development workflows for efficient vulnerability management and faster response times. Learn how to leverage automation and project tracking tools to enhance security practices.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Open Source Security Tools for Kubernetes Applications

Explore open-source tools for securing Kubernetes applications, covering image scanning, runtime security, and anomaly detection. Learn practical strategies for maintaining a secure cloud-native environment.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Lessons from Integrating Third Party Library Scanning in DevOps Workflow

Integrating third-party library scanning in DevOps: automation strategies, architectural choices, and best practices for secure development at scale. Tips for seamless implementation and measuring success.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

SCORE Bot - Shift Left, at Scale!

Automated security code review tool for early detection of organization-specific vulnerabilities, integrated with GitHub PR process. Provides real-time feedback and actionable guidance for developers.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Value Driven Threat Modeling

Learn efficient, value-driven threat modeling techniques to embed secure design in products from the start. Discover how to integrate security into agile development and prioritize vulnerabilities effectively.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Making Security Approachable for Developers and Operators

Explore strategies to make security more accessible for developers and operators through APIs, secure-by-default platforms, and policy as code, enhancing overall security posture.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Perimeter-less - Engineering the Future of Defense

Explore modern defense strategies for complex digital ecosystems, focusing on designing defensible systems beyond traditional perimeter security to protect platforms, applications, and services at internet scale.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Exploiting Unknown Browsers and Objects

Discover hidden browser vulnerabilities with the Hackability Inspector, a new offensive toolkit for security researchers to explore and exploit unknown entities in embedded browsers.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

FIESTA - An HTTPS Side-Channel Party

Explore HTTPS side-channel vulnerabilities and a new tool, FIESTA, for testing and exploiting these issues. Learn about a novel side-channel affecting major tech companies and its implications for online security.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Building Secure Software With OWASP Tools and Guides

Explore OWASP's comprehensive tools and guides for building secure software throughout the development lifecycle, from policy creation to implementation and verification.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

What's New in TLS 1.3

Explore TLS 1.3's security enhancements, new protocol handshakes, and 0-RTT resumption. Learn about potential deployment pitfalls and how to avoid them in this comprehensive overview of the latest TLS version.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

Optimize Your Pentesters Time

Optimize pentesting resources with Hunter, an open-source tool grading websites for low-risk security issues. Learn how eBay saved 10-15% of their pentesting budget and improved efficiency.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Lessons From the Threat Modeling Trenches

Insights from building threat modeling practices across organizations, focusing on reducing design errors. Explores lessons learned, challenges faced, and strategies for effective implementation in software security.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

Digital Disease - How Healthcare Cybersecurity Challenges Can Claim or Save Lives

Explore healthcare cybersecurity challenges and their impact on patient safety. Learn how integrating clinicians with software developers can address risks in an increasingly connected medical landscape.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk