Application Security Courses and Certifications

Introduction to OAuth2, OpenID Connect and JSON Web Tokens (JWT)

1376 ratings at Pluralsight

OAuth2, OpenID Connect, and JWT are the new security stack for modern applications.

• Pluralsight
• 2 hours 24 minutes
• On-Demand
• Free Trial Available

Cross Site Scripting (XSS) Prevention for ASP.NET Core and ASP.NET Applications

36 ratings at Pluralsight

Cross Site Scripting (XSS) is high on the OWASP top 10 list of the most used attacks. Learn how to protect your ASP.NET and ASP.NET Core applications against it.

• Pluralsight
• 26 minutes
• On-Demand
• Free Trial Available

USENIX Enigma Conference

Insecurity in Information Technology - Impact on Application Security

Explore how personal insecurities and workplace dynamics impact software security. Learn strategies to improve collaboration between developers and security teams for better outcomes.

• YouTube
• 20 minutes
• On-Demand
• Free Online Course

LASCON

The Abridged History of Application Security

Explore the evolution of application security from the 1960s to present, highlighting improvements and inspiring security professionals with a historical perspective on industry progress.

• YouTube
• 39 minutes
• On-Demand
• Free Online Course

LASCON

Build More Secure Apps with OWASP SKF and ASVS on Kubernetes

Enhance app security using OWASP SKF & ASVS on Kubernetes. Learn integration, manage ASVS requirements, and explore SKF Labs. Includes demo and GitHub repo for easy deployment on EC2 or AWS.

• YouTube
• 45 minutes
• On-Demand
• Free Online Course

LASCON

Modern Approaches to Application Security - Purple Team Strategies

Explore modern application security combining offense, defense, automation, and continuous learning for developers. Learn how 'Purple Team' approaches can create more effective and affordable security models.

• YouTube
• 48 minutes
• On-Demand
• Free Online Course

LASCON

The End of the AppSec Team - Future of Application Security

Explore the future of application security, challenging traditional team structures and proposing innovative approaches to address the growing demand for AppSec professionals in software development.

• YouTube
• 49 minutes
• On-Demand
• Free Online Course

LASCON

AppSec at a Startup - Year Zero

Learn strategies for building an effective application security program at a startup, including developer engagement, automation, and rapid security improvements for SaaS companies.

• YouTube
• 53 minutes
• On-Demand
• Free Online Course

LASCON

Securing Legacy Applications: Tips and Tricks for Refactoring

Discover and fix security issues in legacy applications with practical tips and tricks. Learn to identify common vulnerabilities and refactor code for enhanced security.

• YouTube
• 46 minutes
• On-Demand
• Free Online Course

LASCON

Realizing Software Security Maturity - The Growing Pains and Gains

Explore the challenges and opportunities of implementing a comprehensive application security program using the Software Assurance Maturity Model (SAMM) to guide success beyond basic OWASP Top 10 compliance.

• YouTube
• 47 minutes
• On-Demand
• Free Online Course

LASCON

Climbing AppSec Mountains - How to Summit and Overcome Corporate Roadblocks

Explore strategies for overcoming corporate roadblocks in application security, focusing on early involvement in the software development lifecycle to prevent vulnerabilities and improve software quality.

• YouTube
• 51 minutes
• On-Demand
• Free Online Course

LASCON

Introduction to Inner-Loop Security - Shifting Left, but Better

Explore inner-loop security as the next evolution of "shift left," enabling developers to build secure-by-design products through improved methodologies and tools.

• YouTube
• 50 minutes
• On-Demand
• Free Online Course

LASCON

The Software Security Testing Lifecycle - A Framework for Effective Security Testing

Comprehensive framework for integrating security testing throughout development, empowering teams to identify threats early and validate controls effectively.

• YouTube
• 48 minutes
• On-Demand
• Free Online Course

LASCON

Security Instrumentation - The Future of Software Security

Explore security instrumentation as a revolutionary approach to enhance software security, offering dynamic capabilities like intrusion detection, SBOM reporting, and runtime protection without code changes.

• YouTube
• 55 minutes
• On-Demand
• Free Online Course

LASCON

Security Code Analysis is for Everyone - 2019

Learn proactive approaches to identify and fix software vulnerabilities using Security Code Analysis, addressing complex applications and diverse development environments.

• YouTube
• 47 minutes
• On-Demand
• Free Online Course