Security Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time
summary
Argues OWASP is a practical toolbox, not just a mission statement, listing roughly 157 usable projects, 18 flagship and 34 lab projects and the surprising industry ratio of developers outnumber security teams 100 to 1. Recommends using the Top Ten and Cheat Sheets for quick prevention steps, running Juice Shop in Docker to practice with its built‑in CTF, scanning with zap to generate vulnerability reports, and consulting OpenCRE for mapped requirements.
AI-written summary · about
chapters (6)
- 0:00Start
- 7:12Open Web Application Security Project
- 7:27OWASP Mission
- 14:50OWASP Education And Training
- 18:39OWASP Cheat Sheet Series
- 23:52OWASP Getting Started
related talks
28mSecurity Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time
36mApp Security Does Not Need To Be Fun: Ignoring OWASP To Have A Terrible Time
38mFree security resources that your competitors use!
57mThe Developer's Field Guide to Software Security
45mLeveraging Projects and Tools to Transform Your SDLC
26mOpenSec and Why WebAppSec Matters
37mDeploying Security Testing Practice in Your Team and Company
27mHow to Start Security Testing Without Fear