OWASP Foundation Courses

Navigating the Security Landscape of a Cloud-First World

Navigating cloud security challenges: shared responsibility, data protection, and enterprise ownership in the era of rapid cloud adoption. Strategies for maintaining security in cloud migrations.

• YouTube
• 31 minutes
• On-Demand
• Free Video

The Only Reason Security Matters for DevOps - APPSEC Cali 2018

Explore DevOps' impact on security, focusing on strategic business drivers, modern challenges, and practical recommendations for integrating security into DevOps using a simplified framework.

• YouTube
• 47 minutes
• On-Demand
• Free Video

European Vacation: Leveraging GDPR for Security

Explore how GDPR compliance can drive security initiatives and automate processes, turning a potential burden into a win for application security.

• YouTube
• 54 minutes
• On-Demand
• Free Video

Predicting Random Numbers in Ethereum Smart Contracts

Explore vulnerabilities in random number generation for Ethereum smart contracts, focusing on gambling applications. Learn to identify and build secure RNGs within blockchain limitations.

• YouTube
• 52 minutes
• On-Demand
• Free Video

OWASP Top 10 - Application Security Risks

Explore the latest OWASP Top 10 web application security risks with expert Andrew van der Stock. Learn about critical vulnerabilities and effective mitigation strategies for safer software development.

• YouTube
• 47 minutes
• On-Demand
• Free Video

Supply Chain Anarchy - Trojaned Binaries in the Java Ecosystem

Explore the security risks of third-party code in Java applications, focusing on potential discrepancies between source code and binaries. Learn about an automated security pipeline for detecting malicious differences.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Beyond End-to-End Encryption: Threat Models for Secure Messaging

Explore evolving threat models for secure messaging, covering advanced attacker capabilities, real-world vulnerabilities, and emerging challenges in cybersecurity and privacy protection.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Top 10 Security Best Practices for Securing Microservices

Comprehensive guide to securing microservices, covering TLS, authentication, authorization, DDoS protection, monitoring, encryption, and more. Essential for developers and architects building scalable, secure APIs.

• YouTube
• 38 minutes
• On-Demand
• Free Video

Leveraging the ASVS in the Secure Software Development Lifecycle

Integrating OWASP ASVS into the secure software development lifecycle to create uniform security requirements, prioritize tasks, and track adherence across applications using existing tools and processes.

• YouTube
• 38 minutes
• On-Demand
• Free Video

Exploring the Ecosystem of Malicious Domain Registrations in the .eu TLD

Extensive analysis of malicious domain registrations in .eu TLD, revealing cybercriminal tactics and campaign patterns. Insights into automated processes and operational aspects of large-scale malicious activities.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Creating an AppSec Pipeline with Containers in a Week

Explore the journey of setting up an AppSec pipeline using Docker containers, addressing challenges, managing false positives, and optimizing security tools for seamless integration with development teams.

• YouTube
• 36 minutes
• On-Demand
• Free Video

The Evil Friend in Your Browser - Browser Extension Security Risks

Explore the hidden dangers of browser extensions, their security model limitations, and potential risks to user privacy. Learn about real-world analysis findings and discuss improved security measures.

• YouTube
• 45 minutes
• On-Demand
• Free Video

How to Spend $3.6 Million on One Coding Mistake - OWASP BeNeLux Day

Explore infamous data breaches, their technical vulnerabilities, and preventive coding solutions. Learn practical techniques to enhance application security and avoid costly mistakes in your development process.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Monitoring Application Attack Surface and Integrating Security into DevOps Pipelines

Explore methods for calculating and tracking web application attack surface evolution, and learn to integrate security testing into CI/CD pipelines using metrics-based policies.

• YouTube
• 48 minutes
• On-Demand
• Free Video

Embedding GDPR into the Software Development Lifecycle

Practical guide to integrating GDPR requirements into software development lifecycle, covering privacy awareness, risk analysis, secure coding, threat modeling, and breach notification processes.

• YouTube
• 44 minutes
• On-Demand
• Free Video