Security Courses

OWASP Foundation

Temporal - Security As Code - The New Model Of Achieving Security At Scale

Explore security as code by codifying policies and applying software engineering practices across the security-control lifecycle.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Temporal - Redefining Threat Modeling - Security Team Goes on Vacation

Explores self-serve threat modeling through training and observation phases, enabling teams to continue the practice when the security team is away.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

OWASP SAMM 2 - Your Dynamic Software Security Journey

Learn how OWASP SAMM 2 uses maturity levels, scoring, assessment tools, and dashboards to guide a dynamic software security improvement journey.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

HTTP3 Security

Examines HTTP/3 security through QUIC handshakes, passive proxies, deep packet inspection, packet decryption, and qlog analysis.

• YouTube
• 1 hour 19 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

How to Find and Prevent Entire Classes of Security Vulnerabilities

Learn variant analysis techniques for finding and preventing entire classes of software vulnerabilities through code navigation, automation, and real-world examples.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

The Security We Need - Designing Usable IoT Security

Design usable IoT security with clear defaults, targeted risk information, anomaly detection, and revocable authorization.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Injecting Security Controls in Software Applications

Learn to integrate security controls into the software development life cycle using real-world examples of injection, vulnerable components, libraries, and logging.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Common API Security Pitfalls

Assess common API security pitfalls involving authentication, tokens, cryptography, cross-origin requests, and input validation.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Cookie Security - Myths and Misconceptions

Examine cookie-security myths, from the limits of Secure and HttpOnly to path and domain attacks and modern protections such as SameSite and cookie prefixes.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Pushing Left Like A Boss - Application Security Foundations

Learn how to push application security left through code testing, threat modeling, developer education, and security practices throughout the SDLC.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Application Security Playbook for Business

An overview of the key challenges and execution elements involved in building application security into software amid rapid application growth.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Flipping the Script on Application Security

A developer-first look at DevSecOps challenges and application security through credential scanning and static analysis.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Pinecone

Preventing Déjà Vu - Vector Similarity Search for Security Alerts, with Expel and Pinecone

A methodology workshop on using vector similarity search to identify related security alerts and reduce alert fatigue.

• YouTube
• 57 minutes
• Self-Paced
• Free Video

Oracle

Complete Database Security in 4 Simple Steps

Secure an Oracle Database quickly in four simple steps, covering assessment, Database Vault, auditing, and a final review.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Oracle

How Secure Is Your Database? Oracle Database Security Assessment Tool

Assess Oracle database security posture with DBSAT by examining users, sensitive data, and workshop findings.

• YouTube
• 1 hour 18 minutes
• Self-Paced
• Free Video