Application Security (AppSec) Courses and Certifications

OWASP Foundation

Lessons From DevOps - Taking DevOps Practices Into Your AppSec Life

Explore DevOps practices for enhancing application security, including workflow optimization, improved feedback loops, and automation techniques to streamline AppSec processes.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Building an AppSec Pipeline - Keeping Your Program, and Your Life, Sane

Learn to build an efficient AppSec pipeline to streamline your security program, improve workflow, and enhance overall productivity in application security management.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Black Hat

Shifting Knowledge Left - Keeping up with Modern Application Security

Explore modern application security challenges in DevSecOps, including evolving web technologies, persistent vulnerabilities, and emerging framework defenses against common threats.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Bugcrowd

Back to Basics - Application Security Practices in Smart Contract Auditing

Explore application security practices in smart contract auditing, focusing on Solidity, common vulnerabilities, security tools, and the growing market for blockchain security engineers.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Black Hat

Abusing Bleeding Edge Web Standards for Appsec Glory

Explore risks and mitigation strategies for modern web security standards like SRI, CSP, and HPKP. Learn about implementation challenges, trade-offs, and potential exploits in legacy applications.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Black Hat

The Tactical Application Security Program - Getting Stuff Done

Practical approach to application security: lightweight team, agile methods, and operational excellence. Covers assessments, bug handling, and private bug bounty programs, with actionable advice for managers and practitioners.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Black Hat

AndroBugs Framework - An Android Application Security Vulnerability Scanner

Explore AndroBugs Framework, a free Android vulnerability analysis system. Learn to identify and mitigate security risks in Android apps before release, enhancing app safety and user protection.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

IEEE

Stack Overflow Considered Harmful - The Impact of Copy & Paste on Android Application Security

Explores the security implications of developers copying code from Stack Overflow into Android apps, revealing alarming rates of insecure snippet usage in popular applications.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

GOTO Conferences

AppSec - From the OWASP Top Ten to the OWASP ASVS

Comprehensive overview of application security standards, comparing OWASP Top Ten to the more detailed ASVS, providing developers with in-depth guidance for secure software development.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

NDC Conferences

Web Application Security Trends

Explore modern web security threats beyond traditional attacks, including vulnerabilities in Angular, Clickjacking, and XSS via file uploads. Stay updated on evolving risks and defense strategies.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

NDC Conferences

Beyond the OWASP Top 10 - Modern Web Application Bugs

Explore modern web application vulnerabilities beyond OWASP Top 10, including XML External Entity, Serialization, and Server-side Request Forgery. Learn detection and mitigation strategies for emerging security threats.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

NDC Conferences

Web Application Security - Browsers Fight Back

Explore browser-based security measures like XSS filters, HTTP headers, and protocols to prevent common web application vulnerabilities and enhance overall protection.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

NDC Conferences

50 Shades of AppSec

Explore diverse AppSec challenges, from social hacking to obscure attacks, gaining insights to stay ahead in the rapidly evolving cybersecurity landscape.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

NDC Conferences

Application Security from Start to Finish

Comprehensive guide to integrating security throughout the development process, covering secure environments, dependency management, vulnerability scanning, and advanced testing techniques.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

NDC Conferences

AppSec is Too Hard

Explore common AppSec challenges, framework limitations, and practical solutions for building more secure applications at scale. Learn robust patterns to enhance your security practices.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk