OWASP Foundation Courses

Modern Application Security vs. GenAI Applications: Is Your AppSec Ready?

1 review

Explore the intersection of modern application security and generative AI, assessing readiness for emerging challenges in the evolving tech landscape.

• YouTube
• 47 minutes
• On-Demand
• Free Video

Forensic Investigations of Web Exploitations

1 review

Explore network forensics techniques and open-source tools for investigating web server compromises, analyzing captured traffic, and reconstructing malicious sessions to uncover digital evidence.

• YouTube
• 53 minutes
• On-Demand
• Free Video

Enhancing CI/CD Secrets Security - The 3Rs Approach

Explore the 3Rs approach to enhance CI/CD secrets security: Reduce stored secrets, use short-lived credentials, and prevent leaks in source code. Practical tips for implementing these principles across various platforms.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Large-Scale Application Attack Surface Management

Comprehensive approach to managing attack surfaces in large-scale applications, covering APIs, web services, and mobile apps. Explores techniques, challenges, and lessons learned for effective security implementation.

• YouTube
• 45 minutes
• On-Demand
• Free Video

Hacking the Software Supply Chain - Targeting Developers in 2023

Explores techniques used by cybercriminals to target software engineers, highlighting vulnerabilities in the software supply chain and providing protective strategies for developers.

• YouTube
• 48 minutes
• On-Demand
• Free Video

Scratch Containers and the Supply Chain Trouble

Explore scratch containers, their benefits in reducing vulnerabilities, and potential challenges in software composition analysis. Learn about security implications for containerized applications.

• YouTube
• 49 minutes
• On-Demand
• Free Video

API Security Assurance via End-to-End Testing

Learn how to integrate API security assurance into end-to-end testing, empowering engineers to identify security edge cases and continuously design secure applications from the MVP stage.

• YouTube
• 55 minutes
• On-Demand
• Free Video

Enterprise Application Risk Profiling - Dynamic Inventory and Framework

Learn to dynamically assess and prioritize application security risks in your organization. Discover a framework for identifying new apps and significant changes to maintain an up-to-date risk profile.

• YouTube
• 53 minutes
• On-Demand
• Free Video

Using LLMs and Generative AI to Fix Software Vulnerabilities

Explore how LLMs and generative AI can revolutionize software vulnerability remediation, empowering security teams to create and validate fixes without extensive developer experience or access.

• YouTube
• 57 minutes
• On-Demand
• Free Video

Lessons Learned: A Retrospective on Application Security Failures

Practical insights for improving application security through better tooling, processes, and design patterns. Learn from past failures to create a more secure future for web applications.

• YouTube
• 53 minutes
• On-Demand
• Free Video

Supply Chain Threats Deserve Their Own Incident Response Plan

Learn to create a specialized incident response plan for software supply chain attacks, focusing on AppSec-related incidents and their unique characteristics compared to traditional cybersecurity threats.

• YouTube
• 56 minutes
• On-Demand
• Free Video

Security of Machine Learning Systems

Explore security challenges in AI and ML systems, including adversarial attacks and MLOps. Learn to apply pen testing skills to ML, with demonstrations on manipulating image recognition and NLP models.

• YouTube
• 53 minutes
• On-Demand
• Free Video

CVE Overload: Scaling Container Vulnerability Scans

Strategies for scaling container vulnerability scans: risk assessment, streamlined triage, automation, and data-driven insights to manage CVEs effectively in large-scale environments.

• YouTube
• 55 minutes
• On-Demand
• Free Video

OWASP Coraza - Open Source WAF for Cloud Native Service Mesh

Explore Coraza, an open-source WAF for Kubernetes & Istio. Learn integration, safe rollout, scalability, and performance optimization for high-volume request handling as a ModSecurity alternative.

• YouTube
• 53 minutes
• On-Demand
• Free Video

Profiling Socially-Motivated Cyber Criminals

Explore the emerging threat of socially-motivated cyber criminals, their tactics, and impact on targets. Learn how to understand and defend against this new breed of networked adversaries in the digital landscape.

• YouTube
• 1 hour
• On-Demand
• Free Video