Skip to content

DEF CON 34 talks are here: 354 talks, summarized and searchable.

Browse DEF CON 34

Open Security Training 2 Free Deep Technical Training

Xeno Kovah

CommunityTalks25 minBeginnerOpen on YouTube ↗

Where

Talks
ShmooCon 2023

Duration

25 min

Describes a free nonprofit catalog of deep security classes and how its learning paths are built.

Summary

The speaker, a longtime maintainer of free security courseware, traces the project's history from an earlier volunteer effort, built while working at an employer, to the current version relaunched in 2021 as a nonprofit. The goal is to match the quality of paid private training while offering it for free, so instructors can reach thousands of students instead of a few dozen. He argues that free online courses and paid in-person courses serve largely separate audiences, so both can coexist.

Next he walks through the catalog to show that the classes are deep rather than introductory. Examples include symbolic analysis with SMT solvers and angr, C++ reverse engineering, Intel firmware attack and defense, UEFI and coreboot, and a developer-focused course on memory corruption bugs in C-family code. The strategy is to sequence classes into learning paths tied to job roles, share foundational material such as assembly and debugging rather than repeating it in every course, and let advanced instructors assume prerequisites.

He closes by suggesting that teaching a class can multiply an engineer's impact more than doing individual engineering work, and that open source projects and niche platforms can gain exposure to the site's existing audience. The takeaway for practitioners is that well-made free training can spread expertise widely, and that building or contributing a course is a concrete option.

Related talks