OWASP Foundation Courses

Social Media Botnet Detection with Linkage Analysis and Machine Learning

Explore techniques for detecting social media spam botnets using linkage analysis and machine learning, covering unsupervised and semi-supervised approaches and their applications.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Why Developers Struggle with AppSec

Explore challenges developers face in application security, trust issues, and solutions for integrating security into the development process, with insights on tools and production biases.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Supplier Risk - Where OSS Collides With Vendor Management

Explore the intersection of open source software and vendor management, focusing on supplier risk, regulatory mandates, and strategies for mitigating potential threats in the software supply chain.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Yes, You Too Can Break Crypto - Exploiting Common Crypto Mistakes

Explore common cryptographic vulnerabilities and learn practical techniques to exploit them, enhancing your understanding of secure implementation and potential attack vectors.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Real Time Vulnerability Alerting by Using Principles from the United States Tsunami Warning Center

Learn how to implement real-time vulnerability alerting using principles from the US Tsunami Warning Center, covering triage methods, data analysis, and prioritization techniques.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

OWASP SAMM 2 - Your Dynamic Software Security Journey

Explore OWASP SAMM 2, a dynamic framework for software security. Learn principles, assessment tools, and critical success factors to enhance your organization's security maturity.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

OWASP IoTGoat Project Overview and Roadmap

Explore IoTGoat, an OWASP project for IoT security testing. Learn about hardware compatibility, vulnerabilities, and hands-on techniques like firmware extraction and password cracking.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Magecart 2020 - The New Face of XSS

Explore Magecart's evolution, injection techniques, and threat complexity. Learn from real-world case studies and discover strategies to prevent these sophisticated web skimming attacks.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

MLSec Going Deeper

Explore advanced machine learning security concepts, including adversarial samples, attack strategies, and defensive techniques for various ML models.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Enabling Message Level Protection at Uber

Explore Uber's approach to message-level protection, including encryption strategies, crypto interfaces, and developer evangelism for secure data handling at scale.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Application Logging in the Era of GDPR

Explore GDPR-compliant application logging practices, data privacy laws, and effective strategies for protecting sensitive information in production logs.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Insider Threat Detection & Automation by Behaviour Analytics

Learn to detect and automate insider threat prevention using behavior analytics, exploring UEBA, anomalies, and data-driven techniques for enhanced cybersecurity.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

A Dancefloor that is Literally Just Banana Peels - AppSec Awareness Program Pitfalls

Explore common pitfalls in AppSec awareness programs and learn effective strategies for implementation, audience engagement, and sustainable security education.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Before It's Out the Door - Securing Outbound Open Source

Explore strategies for securing open-source projects before release, covering governance, code review, and infrastructure. Learn to address security concerns and manage community projects effectively.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

HTTP3 Security

Explore HTTP3 security with Robin Marx: handshakes, QuickSense, passive proxies, deep packet inspection, and QUIC vs TCP. Gain insights into the latest web protocol advancements.

• YouTube
• 1 hour 19 minutes
• Self-Paced
• Conference Talk