Security Testing Courses and Certifications

LASCON

The Software Security Testing Lifecycle - A Framework for Effective Security Testing

Comprehensive framework for integrating security testing throughout development, empowering teams to identify threats early and validate controls effectively.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

OWASP Foundation

Automated Serverless Security Testing: Delivering Secure Apps Continuously

Explore serverless security risks, traditional testing limitations, and a new automated approach for secure serverless development without scripts or delays.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

OWASP Foundation

Purple Teaming with OWASP PurpleTeam - Security Regression Testing

Explore OWASP PurpleTeam, a security regression testing tool for web apps and APIs. Learn its components, setup, and workflows for early detection of application security defects in build pipelines.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

OWASP Foundation

How Security, Development, and Testing Can Work Together to Stop Recurring Vulnerabilities - OWASP Top 10

Explore strategies for integrating security, development, and testing to prevent recurring vulnerabilities in the OWASP Top 10, fostering collaboration and cultural change for secure software development.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

OWASP Foundation

Fast Forwarding Mobile Security with the Mobile Security Testing Guide

Explore mobile security advancements and best practices using the Mobile Security Testing Guide (MSTG) in this comprehensive OWASP presentation.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

OWASP Foundation

Scaling Security Testing at the Speed of DevOps

Explore scaling security testing in DevOps with Roger Seagle. Learn about deployment models, architecture, relay connectivity, and creating effective security tests using Docker and Serverspec.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

OWASP Foundation

Storytelling Techniques for Application Security - Beyond Penetration Testing

Explore interview-based research and consultancy techniques for enhancing application security maturity, fostering security champions, and building quality-minded teams.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Black Hat

Domo Arigato, Mr. Roboto - Security Robots a la Unit-Testing

Explore security unit testing for custom code, focusing on inoculating applications, identifying endpoints, and addressing common vulnerabilities through automated testing frameworks.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Black Hat

Towards a Taxonomy of Network Security Testing Techniques

Explore network security testing techniques, their effectiveness, and limitations. Gain insights into security scanners' functionality and potential misleading results.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

RSA Conference

Building a Comprehensive IoT Security Testing Methodology

Comprehensive methodology for IoT security testing, covering functional evaluation, reconnaissance, testing phases for various components, and analysis. Equips testers with skills for enterprise and consumer IoT ecosystems.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Security BSides London

Continuous Security Testing in a DevOps World

Explore continuous security testing in DevOps using BDD-Security framework. Learn to specify requirements, create executable tests, and integrate with CI/CD for on-demand security assessments.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Agile Security Testing - Lessons Learned

Explore agile security testing strategies, challenges, and best practices for efficient integration of security in software development, based on real-world experiences and lessons learned.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

OWASP Foundation

DevOps Security: Continuous Testing and Secret Management - OWASP AppSec Europe 2014

Explore cutting-edge AppSec topics including hybrid analysis mapping, continuous security testing, attack proxy plugins, and scalable secret protection in this DevOps-focused conference track.

• YouTube
• 6 hours 47 minutes
• Self-Paced
• Free Video

OWASP Foundation

Insecure Expectations - Testing for Common Security Issues in Rails Applications

Explore hands-on examples of security testing in Rails, learn about common vulnerabilities, and discover a new open-source tool for simplified security test writing. Gain practical skills to enhance your application's security.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

OWASP Foundation

Verifying Software for Security Bugs - Dynamic Analysis and Fuzzing Testing

Learn dynamic analysis and fuzzing techniques to verify software security, including mitigations and vulnerability checks. Explore BinSecSweeper, an open-source tool for binary analysis on Windows and Linux.

• YouTube
• 50 minutes
• Self-Paced
• Free Video