OWASP Foundation Courses

Forensic Investigations of Web Exploitations

1 review

Explore network forensics techniques and open-source tools for investigating web server compromises, analyzing captured traffic, and reconstructing malicious sessions to uncover digital evidence.

• YouTube
• 53 minutes
• On-Demand
• Free Video

MarkDoom: How I Hacked Every Major IDE in 2 Weeks

Explore how major IDEs were hacked through embedded browsers, revealing critical security vulnerabilities in desktop applications built with web technologies. Learn about the risks and safeguards in the "Desktop Web" era.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Decrease Your Stress and Increase Your Reach with AppSec Champions

Learn strategies to build a security-conscious culture and recruit AppSec champions within your organization, reducing stress and increasing the impact of your security efforts.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Security After Death - Password Management and Secure Sharing

Explore practical solutions for secure password storage and sharing, including commercial and open-source options. Learn how to manage passwords effectively and plan for unexpected scenarios.

• YouTube
• 35 minutes
• On-Demand
• Free Video

The Path of DevOps Enlightenment for InfoSec

Explore the convergence of DevOps and Security, addressing industry challenges and providing insights for navigating the evolving landscape of information security.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Fighting Advanced Threats at Their Software Roots - Scaling Software Security

Exploring strategies to scale software security beyond developers, addressing vulnerabilities at their roots, and transforming the software ecosystem to combat advanced threats effectively.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Threat Modeling Panel - APPSEC Cali 2018

Expert panel discusses threat modeling techniques, challenges, and best practices in application security, featuring insights from industry leaders at major tech companies.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Taking on the King: Killing Injection Vulnerabilities - APPSEC Cali 2018

Explore strategies to combat injection vulnerabilities, including cross-site scripting, with insights on secure coding practices, framework design, and static analysis tools for improved application security.

• YouTube
• 54 minutes
• On-Demand
• Free Video

The Best Flaw Didn't Make It Into Production - Addressing Security Gaps in Development

Explore innovative approaches to address application security gaps, focusing on timely collaboration between security practitioners and development teams to influence secure coding practices.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Privacy Violations, Fines, and Economic Sanctions - Creating Darker Opportunities in Cybercrime

Explore privacy violations, fines, and economic sanctions in cybersecurity. Learn about EU GDPR implications, cyber crime opportunities, and how sanctioned countries exploit digital vulnerabilities for funding.

• YouTube
• 41 minutes
• On-Demand
• Free Video

A Free, Fair and Open Internet is a Process, Not a Product - Closing Keynote

Cory Doctorow explores the ongoing fight for a free, fair, and open internet, emphasizing its importance for freedom, privacy, and human rights. He urges continued engagement in this crucial process.

• YouTube
• 52 minutes
• On-Demand
• Free Video

Architecting for Security in the Cloud

Explore cloud security architecture, identifying vulnerabilities, and implementing robust defenses. Learn strategies to protect your applications from various attack vectors and ensure scalable, secure cloud deployments.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Edgeguard: Client-side DOM Security Framework for Detecting Malicious Content - APPSEC Cali 2018

Introducing Edgeguard: an open framework for detecting malicious content in browsers that steals sensitive user data. Learn about this zero-footprint library's approach to enhancing client-side DOM security.

• YouTube
• 40 minutes
• On-Demand
• Free Video

DevSecOps: Integrating People and Automation in Application Security

Explore DevSecOps principles, focusing on human aspects like collaboration, communication, and decision-making to enhance application security within real-world constraints.

• YouTube
• 48 minutes
• On-Demand
• Free Video

Navigating the Security Landscape of a Cloud-First World

Navigating cloud security challenges: shared responsibility, data protection, and enterprise ownership in the era of rapid cloud adoption. Strategies for maintaining security in cloud migrations.

• YouTube
• 31 minutes
• On-Demand
• Free Video