Security Courses

OWASP Foundation

Being Powerful While Powerless - Elevating Security By Leading Without Authority

Learn strategies for elevating security without formal authority, including technical approaches and cultural tactics to influence stakeholders and drive positive change in organizational security practices.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

The Security We Need - Designing Usable IoT Security

Explore usable IoT security design principles to create user-friendly, effective protection. Learn strategies for clear communication, secure defaults, and seamless integration of security measures.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

How Do JavaScript Frameworks Impact The Security Of Applications

Explore JavaScript frameworks' impact on application security, analyzing mitigation levels, case studies, and CSRF protection across popular frameworks like Meteor.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Controlled Mayhem With Cloud Native Security Pipelines

Explore cloud-native security pipelines, comparing traditional and modern approaches, while addressing challenges in container orchestration, access control, and CI/CD processes.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Security Vulnerabilities Decomposition - Another Way to Look at Vulnerabilities

Explore security vulnerabilities decomposition, focusing on SQL injection, secure data handling, and design patterns for payment gateways and single sign-on. Learn practical security controls for secure development.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Applying Security Engineering Principles to Complex Composite Systems

Explore security engineering principles for complex systems, focusing on composite elements, interactions, and dependencies across the system lifecycle, illustrated with a Smart City transit example.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

OWASP Foundation

From Rogue One to Rebel Alliance - Building Developers into Security Champions

Learn to transform developers into security champions, scaling your AppSec efforts. Discover recruitment strategies, training techniques, and success metrics for building a robust security program within development teams.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Injecting Security Controls in Software Applications

Explore techniques for integrating security controls into software development, focusing on real-world examples, actionable advice, and verification methods to build more secure applications.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Can We Automate Security?

Explore Microsoft's CI/CD pipeline security tools and lessons learned, focusing on automation strategies to enhance product and service security in the development process.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Vehicle Security Trends - Implications for Automotive Suppliers

Explore automotive security trends, attack surfaces, and mitigation strategies for suppliers in the era of connected and autonomous vehicles. Learn about third-party risks and development process improvements.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Common API Security Pitfalls

Explore common API security pitfalls, their root causes, and best practices for protection. Learn to assess and improve API security, focusing on authentication, encryption, and input validation.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Running at Light Speed - Cloud Native Security Patterns

Explore cloud-native security patterns, including container isolation, control plane hardening, and network segmentation. Learn about authentication, authorization, and secrets management in cloud environments.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

OWASP Foundation

Battle Tested Application Security

Insights on building effective Application Security programs, focusing on security culture, defensive capabilities, and organizational empowerment across different environments.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Scratching the Surface of Your CD - Continuous Delivery and Application Security Challenges

Explore strategies for integrating continuous security testing into fast-paced Continuous Delivery environments, addressing challenges and streamlining processes for modern development workflows.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

The Anatomy of a Secure Web Application in Java Using Spring Security and Apache Fortress

Practical guidance on implementing secure Java web applications using Spring Security and Apache Fortress. Covers authentication, authorization, and confidentiality controls with hands-on demos and code examples.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk