Security Courses

OWASP Foundation

Breaches Are Everywhere - What’s A Good Security Leader To Do?

Explore strategies for security leaders to combat increasing breaches, from IoT vulnerabilities to phishing attacks. Learn essential skills and best practices for effective cybersecurity management.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Practical OWASP CRS in High Security Settings

Learn to implement OWASP Core Rule Set for high-security web applications, covering WAFs, ModSecurity, logging, whitelisting, and advanced protection techniques.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

OWASP Foundation

How to Find and Prevent Entire Classes of Security Vulnerabilities

Learn techniques to identify and prevent security vulnerabilities through variant analysis, code navigation, and automation, using real-world examples and practical strategies.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Being Powerful While Powerless - Elevating Security By Leading Without Authority

Learn strategies for elevating security without formal authority, including technical approaches and cultural tactics to influence stakeholders and drive positive change in organizational security practices.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

OWASP Foundation

The Security We Need - Designing Usable IoT Security

Explore usable IoT security design principles to create user-friendly, effective protection. Learn strategies for clear communication, secure defaults, and seamless integration of security measures.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

OWASP Foundation

How Do JavaScript Frameworks Impact The Security Of Applications

Explore JavaScript frameworks' impact on application security, analyzing mitigation levels, case studies, and CSRF protection across popular frameworks like Meteor.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Controlled Mayhem With Cloud Native Security Pipelines

Explore cloud-native security pipelines, comparing traditional and modern approaches, while addressing challenges in container orchestration, access control, and CI/CD processes.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Security Vulnerabilities Decomposition - Another Way to Look at Vulnerabilities

Explore security vulnerabilities decomposition, focusing on SQL injection, secure data handling, and design patterns for payment gateways and single sign-on. Learn practical security controls for secure development.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Applying Security Engineering Principles to Complex Composite Systems

Explore security engineering principles for complex systems, focusing on composite elements, interactions, and dependencies across the system lifecycle, illustrated with a Smart City transit example.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

OWASP Foundation

From Rogue One to Rebel Alliance - Building Developers into Security Champions

Learn to transform developers into security champions, scaling your AppSec efforts. Discover recruitment strategies, training techniques, and success metrics for building a robust security program within development teams.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Injecting Security Controls in Software Applications

Explore techniques for integrating security controls into software development, focusing on real-world examples, actionable advice, and verification methods to build more secure applications.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Can We Automate Security?

Explore Microsoft's CI/CD pipeline security tools and lessons learned, focusing on automation strategies to enhance product and service security in the development process.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Vehicle Security Trends - Implications for Automotive Suppliers

Explore automotive security trends, attack surfaces, and mitigation strategies for suppliers in the era of connected and autonomous vehicles. Learn about third-party risks and development process improvements.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Common API Security Pitfalls

Explore common API security pitfalls, their root causes, and best practices for protection. Learn to assess and improve API security, focusing on authentication, encryption, and input validation.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Running at Light Speed - Cloud Native Security Patterns

Explore cloud-native security patterns, including container isolation, control plane hardening, and network segmentation. Learn about authentication, authorization, and secrets management in cloud environments.

• YouTube
• 1 hour
• On-Demand
• Conference Talk