OWASP Foundation Courses

Temporal - Redefining Threat Modeling - Security Team Goes on Vacation

Explore innovative self-serve threat modeling techniques that empower development teams to identify and mitigate security risks independently, enhancing overall application security and efficiency.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Temporal - AppSec Timeline - Wins, Failures, Promises, and Predictions

Explore AppSec's 20-year journey: achievements, setbacks, and future prospects. Analyze trends, evaluate DevSecOps impact, and gain insights into the evolving landscape of application security.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

AppSec - From Outsiders to Allies

Chris Wysopal explores AppSec's evolution from hacker-driven to a critical ally in software development, emphasizing the need for collaboration, shared accountability, and integrated security practices in modern development processes.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Digital Disease - How Healthcare Cybersecurity Challenges Can Claim or Save Lives

Explore healthcare cybersecurity challenges and their impact on patient safety. Learn how integrating clinicians with software developers can address risks in an increasingly connected medical landscape.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

A Tour of API Underprotection

Explore API security threats, protection techniques, and advanced strategies. Learn about OAuth2, static API keys, mobile security, certificate pinning, and emerging technologies to strengthen your API security posture.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Threat Modeling Toolkit

Explore threat modeling techniques for software security using a cryptocurrency ecosystem example. Learn to analyze potential attacks, actors, and countermeasures early in development.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

SecDevOps - Current Research and Best Practices

Explore current research and best practices in SecDevOps, covering static and dynamic analysis, security scaling, and infrastructure best practices for improved application security.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Applied Deception Beyond the Honeypot - Moving Past 101

Explore advanced deception techniques beyond honeypots for cybersecurity, drawing insights from military and political strategies to enhance defensive capabilities against diverse adversaries.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Prevention as a Business Strategy

Explore how prevention-focused cybersecurity strategies using AI and machine learning can protect businesses from evolving threats, reducing risks and costs associated with traditional detect-and-respond approaches.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

ReproNow - Save Time Reproducing and Triaging Security Bugs

Discover ReproNow, an open-source tool streamlining security bug reproduction and triage. Learn how this browser extension captures vulnerability walkthroughs, saving time for security engineers and enhancing bug bounty programs.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Leveraging Cloud SDNs to Solve OWASP Top Ten

Explore cloud SDN implementation for OWASP Top Ten security, featuring virtualized controls, service chains, and open-source technologies. Learn practical solutions for web security in virtual networks.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Unpoisoned Fruit - Seeding Trust into a Growing World of Algorithmic Warfare

Exploración de los desafíos éticos y de seguridad en la inteligencia artificial y el aprendizaje automático, enfocándose en la necesidad de transparencia y confianza en los sistemas algorítmicos para prevenir conflictos y desastres humanitarios.

• YouTube
• 1 hour 7 minutes
• On-Demand
• Conference Talk

Costs of Coding to Compliance

Explore the challenges of coding for compliance, learn strategies to address security gaps, and discover how to prioritize initiatives for better risk management in application security.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Authentication Without Authentication

Explore IoT app authentication without user interaction. Learn innovative solutions for secure device communication, demonstrated on a Raspberry Pi.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

We Come Bearing Gifts - Enabling Product Security with Culture and Cloud

Explore innovative approaches to product security, emphasizing automation, cloud deployment, and engineering enablement. Learn how Netflix balances security impact with developer productivity.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk