Open Security Training 2 Free Deep Technical Training
Where
Talks
ShmooCon 2023
Duration
25 min
Describes a free nonprofit catalog of deep security classes and how its learning paths are built.
Summary
The speaker, a longtime maintainer of free security courseware, traces the project's history from an earlier volunteer effort, built while working at an employer, to the current version relaunched in 2021 as a nonprofit. The goal is to match the quality of paid private training while offering it for free, so instructors can reach thousands of students instead of a few dozen. He argues that free online courses and paid in-person courses serve largely separate audiences, so both can coexist.
Next he walks through the catalog to show that the classes are deep rather than introductory. Examples include symbolic analysis with SMT solvers and angr, C++ reverse engineering, Intel firmware attack and defense, UEFI and coreboot, and a developer-focused course on memory corruption bugs in C-family code. The strategy is to sequence classes into learning paths tied to job roles, share foundational material such as assembly and debugging rather than repeating it in every course, and let advanced instructors assume prerequisites.
He closes by suggesting that teaching a class can multiply an engineer's impact more than doing individual engineering work, and that open source projects and niche platforms can gain exposure to the site's existing audience. The takeaway for practitioners is that well-made free training can spread expertise widely, and that building or contributing a course is a concrete option.
Related talks
Talks·37 min
Walks through starting, funding, and retiring an OWASP open source project, from naming and licensing to project levels.
I Am The Cavalry·43 min
Ira Victor
Argues that security education should emphasize process, open-source tooling, and hands-on experience over buying products.
Talks·53 min
Danny Chan
Shows how an open-source pipetting robot paints pixel art with colored bacteria, and how new pigments were found and checked.


