OWASP: Threats Fundamentals

Name: OWASP: Threats Fundamentals
Rating: 4.5 (2233 reviews)

Highest Rated

Created byStone River eLearning

Last updated 11/2018

English

What you'll learn

Understand the top 10 threats to any application
Learn and identify authentication and session threats
Avoid security misconfiguration threats
Prevent sensitive data exposure
Use function level access control to improve security

Course content

4 sections • 27 lectures • 3h 44m total length

Topic A: OWASP Overview - Part 11:37
OWASP Overview - Part 27:23
Discover OWASP, a global non-profit that makes software security visible through free wiki-based resources, diverse security projects, and the flagship top ten project.
OWASP Overview - Part 30:27
Topic B: Top Ten Threats - Part 10:31
Explore the OWASP top ten threats to understand the major risks in web application security and raise awareness of vulnerabilities.
Top Ten Threats - Part 225:13
Top Ten Threats - Part 31:26
Review - Question

Topic A: Authentication and Session Threats - Part 12:39
Authentication and Session Threats - Part 227:30
Learn about broken authentication and session management, a high-impact OWASP top ten risk, and how threat analysis, mitigations, and ASVS guide secure authentication and session controls.
Authentication and Session Threats - Part 30:24
Apply the OWASP application security verification standard to probe a web application for potential risks, check all items, stay a jump ahead of attackers, and ensure your website is secure.
Topic B: Threat Examples - Part 10:29
Threat Examples - Part 229:33
Analyze a simple ASP.NET Web Forms app to understand cookieless session risks, session hijacking via session IDs, and how built-in identity plus OWASP v2 checks mitigate these threats.
Threat Examples - Part 30:31
Review - Question

Topic A: Security Misconfiguration - Part 10:51
Explore how security misconfiguration expands the attack surface in software built with libraries and frameworks on operating systems, and learn where to lock down configurations.
Security Misconfiguration - Part 219:24
Explore how security misconfiguration spans the full stack, why default settings and unpatched software create attack surfaces, and how repeatable hardening, patch management, and cross‑team collaboration mitigate risks.
Security Misconfiguration - Part 30:29
Explore how security misconfiguration drives risk in the OWASP top ten and learn how to manage it using OWASP projects, and volunteer to help improve the web.
Topic B: Misconfiguration Examples - Part 10:38
Misconfiguration Examples - Part 227:46
Apply least privilege and keep libraries up to date to reduce misconfiguration risks. Encrypt sensitive data, limit error information, and use web.config practices and NuGet to secure ASP.NET apps.
Misconfiguration Examples - Part 30:48
Review - Question

Topic A: Sensitive Data Exposure - Part 11:15
Sensitive Data Exposure - Part 229:46
Explore sensitive data exposure risks across data at rest and in motion, emphasizing encryption, secure key management, and TLS/HTTPS protection for end-to-end security.
Sensitive Data Exposure - Part 30:41
Topic B: Insecure Cryptographic Storage - Part 10:51
Insecure Cryptographic Storage - Part 225:19
Insecure Cryptographic Storage - Part 30:46
Topic C: Function Level Access Control - Part 10:53
Function Level Access Control - Part 216:32
Function Level Access Control - Part 30:25
Review - Question

Requirements

The course requires basic knowledge of web applications and network security. Prior experience of working in a development environment is recommended but not required.

Description

The OWASP: Threats Fundamentals course is part of a series of training courses on the Open Web Application Security Project (OWASP). This course covers the fundamental concepts and techniques to identify different types of threats. The course also teaches the students to improve the security by avoiding misconfigurations, data exposure and insecure cryptography.

The OWASP Foundation was established with a purpose to secure the applications in such a way that they can be conceived, developed, acquired, operated, and maintained in a trusted way. All of the OWASP tools, documents, forums, and chapters are free and open to anyone interested in improving application security. This course along with the other courses in the series on OWASP provides a basic overview of the concepts that form an integral part of the OWASP core values.

Who this course is for:

Application security engineers
Network security engineers
Ethical hackers
Software developers

OWASP: Threats Fundamentals

What you'll learn

Explore related topics

Course content

Chapter 01 - Understanding Threats6 lectures • 37min

Chapter 02 - Session Security6 lectures • 1hr 1min

Chapter 03 - Security Misconfiguration6 lectures • 50min

Chapter 04 - Data Exposure and Cryptography9 lectures • 1hr 16min

Requirements

Description

Who this course is for: