
Explore software supply chain failures, including dependency hijacking, unsigned updates, and CI-CD compromises, and learn how to protect ecosystems with digital signatures and SBOMs.
Explore insecure design and threat modeling to prevent software vulnerabilities, using stride methodology and data classification within the six-phase software development cycle.
Identify and prevent authentication failures by securing passwords, session tokens, and login processes. Address brute force, weak passwords, insecure credential recovery, knowledge-based questions, and phishing risks.
Protect software and data integrity by using digital signatures, adopting dependency checks from OWASP, enforcing code reviews, and applying integrity checks before sharing data with untrusted parties.
Learn how security logging and monitoring failures leave breaches undetected, due to insufficient monitoring, missing logins and transactions, warnings, false positives, and poor escalation and real time alert practices.
Explore the updated OWASP top ten api security risks for 2023–2027 and understand how api vulnerabilities differ from traditional web app risks.
Identify broken object level authorization (bola) vulnerability, where missing authorization checks on object IDs in requests enable access to resources, with examples like admin vs user and vin-based vehicle controls.
Conclude the OWASP top 10 course by demonstrating a clear understanding of each of the 10 categories and preparing for cybersecurity endeavors.
Welcome to the OWASP Top 10 deep dive course where you will learn in full detail, the top ten vulnerabilities that applications face today.
The OWASP Top 10 is a standard awareness document for developers and web application security. It represents a broad consensus about the most critical security risks to web applications and has become such an important cyber security resource today.
Unlike other courses that take a lazy approach to describing these security risks, this course analyzes each vulnerability in full detail by describing
What exactly the vulnerabilities are
How they are exploited by attackers
How they can be prevented
Real world cases and scenarios where such vulnerabilities have been exploited
Practical demonstrations of the exploits where possible
We will be making use of some third party applications where applicable to perform some practical examples of some of these vulnerabilities. I will also describe real world cyber attacks that have exploited some of these security risks whenever possible to add some more context.
We will also make use of some third party applications to try out some of these security risks and see how they are actually exploited in a real cyber attack.
I hope to see you inside the course.
Alex.