Application Security (AppSec) Courses and Certifications

Salesforce

Get Started with Application Security

Learn the fundamentals of protecting applications to prepare for a career as an application security engineer.

• Trailhead
• 1-2 hours
• On-Demand
• Free Online Course

Explore a Career in Application Security

The demand for application security professionals continues to grow as more and more apps make their way online. Begin your path toward becoming an application security engineer by building a solid foundation in application security testing.

• LinkedIn Learning
• 16 hours
• On-Demand
• Free Trial Available

OWASP Foundation

Attacking JSON - Vulnerabilities in Popular Parsers

Explore JSON parser vulnerabilities in .NET and Java, including RCE risks. Learn about attack techniques, vulnerable formats, and mitigation strategies for safer serialization implementations.

• YouTube
• 41 minutes
• On-Demand
• Free Video

OWASP Foundation

Leveraging the ASVS in the Secure Software Development Lifecycle

Integrating OWASP ASVS into the secure software development lifecycle to create uniform security requirements, prioritize tasks, and track adherence across applications using existing tools and processes.

• YouTube
• 38 minutes
• On-Demand
• Free Video

OWASP Foundation

QARK: Android App Exploit and Static Code Analysis Tool

Explore QARK, a comprehensive tool for Android app security analysis and exploitation. Learn how it combines static code analysis, vulnerability detection, and automatic exploit generation for developers and pentesters.

• YouTube
• 50 minutes
• On-Demand
• Free Video

OWASP Foundation

Chimera - Securing a Cloud App Ecosystem with ZAP at Scale

Explore Chimera: a cloud-based solution using ZAP to enhance security for small developers and ISVs in large app ecosystems, making advanced scanning tools accessible without security expertise.

• YouTube
• 45 minutes
• On-Demand
• Free Video

OWASP Foundation

Server-Side Browsing Considered Harmful

Explore server-side browsing vulnerabilities and their potential risks in web applications. Learn detection techniques and mitigation strategies for improved security.

• YouTube
• 1 hour 4 minutes
• On-Demand
• Free Video

OWASP Foundation

Hacking the Oracle Application Framework - Deep-Dive Penetration Testing Techniques

Explore deep-dive penetration testing techniques for complex enterprise applications, using Oracle Application Framework as a case study. Learn about static reverse engineering, mock environments, and dynamic monitoring.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Nginx

Infusing Security Into the Application Development Process

Explore integrating security into software development, covering topics like SBOMs, vulnerability scanning, and supply chain security. Learn practical strategies for secure coding practices.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Data Science Dojo

Rapid Assessment of Service and Application Security - Application Design and Architecture

Learn a rapid methodology to assess application security, identify vulnerabilities, and improve overall security posture. Gain practical skills to evaluate design and architecture, even with limited resources.

• YouTube
• 48 minutes
• On-Demand
• Free Video

OWASP Foundation

Turning Engineers into Extended Blue Team Members - Security Strategies

Strategies for empowering engineers to become part of the security team, including threat modeling, incident-driven learning, and security testing integration into development processes.

• YouTube
• 28 minutes
• On-Demand
• Free Video

OWASP Foundation

Black-Box Approximate Taint Tracking by Utilizing Data Partitioning

Innovative black-box taint tracking system for detecting user input data injection in commands and SQL queries, offering cost-effective and performant runtime protection without code modifications.

• YouTube
• 36 minutes
• On-Demand
• Free Video

OWASP Foundation

Using Third-Party Components for Building Secure Software - AppSec EU 2016

Explore secure software development, third-party component risks, and maintenance strategies for effective vulnerability management in enterprise applications.

• YouTube
• 49 minutes
• On-Demand
• Free Video

OWASP Foundation

Security Touchpoints When Acquiring Software

Explore key security considerations and touchpoints in software acquisition, focusing on best practices for ensuring secure integration of third-party solutions.

• YouTube
• 41 minutes
• On-Demand
• Free Video

OWASP Foundation

Wait Wait Don't Pwn Me - Security News Game Show

A live, security news game show pitting experts against each other in a battle of wits. Audience members can participate, competing for prizes while learning about current security issues in a fun, engaging format.

• YouTube
• 33 minutes
• On-Demand
• Free Video