Insecure Deserialization Courses and Certifications

OWASP Top 10: #7 XSS and #8 Insecure Deserialization

77 ratings at LinkedIn Learning

Prepare for the seventh and eighth most common vulnerabilities on the 2021 OWASP Top 10 List: identity and authentication failures, and software and data integrity failures.

• LinkedIn Learning
• 40 minutes
• On-Demand
• Free Trial Available

An Introduction to OWASP Top 10 Vulnerabilities

1775 ratings at Udemy

Comprehensive overview of OWASP Top 10 vulnerabilities, providing fundamental understanding of computer security and design choices for secure application development.

• Udemy
• 1 hour 57 minutes
• On-Demand
• Free Online Course

Infosec

Previous OWASP Risks

22 ratings at Coursera

Explore critical security risks: XML External Entities, Cross-Site Scripting, and Insecure Deserialization. Learn how these vulnerabilities work and their impact on web application security.

• Coursera
• 2 hours 26 minutes
• On-Demand
• Paid Course

OWASP Foundation

Insecure Deserialization, and How Not to Do It

Explore secure deserialization techniques and common vulnerabilities with practical demos, focusing on session cookies and big vulnerabilities in various platforms.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

The Web Security Academy is a free online training center for web application security. It includes content from PortSwigger's in-house research team, experienced academics, and Chief Swig Dafydd Stuttard

• Independent
• On-Demand
• Free Online Course

NDC Conferences

Modern Web Vulnerabilities 2020

Explore modern web vulnerabilities, including insecure deserialization, SSRF, ESI injection, prototype pollution, and HTTP request smuggling, with demos and prevention strategies.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

NDC Conferences

Modern Web Application Bugs

Explore modern web vulnerabilities, including XXE, deserialization attacks, template injection, SSRF, and subdomain takeover. Learn detection and prevention techniques for emerging security threats.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

Bugcrowd

Serverless Top 10 Vulnerabilities by Tal Melamed

Explore serverless security vulnerabilities, their impact, and prevention techniques. Learn how traditional threats evolve in serverless environments and discover best practices for securing cloud-native applications.

• YouTube
• 52 minutes
• On-Demand
• Free Video

OWASP Foundation

Deserialization - What, How and Why Not

Explore insecure deserialization risks, vulnerabilities, and prevention techniques through code examples and live demos, focusing on Java but applicable to other languages.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

NDC Conferences

ASP.NET Core Meets OWASP Top 10

Explore ASP.NET Core's security features through the lens of OWASP Top 10, covering authentication, data protection, access control, and more for robust web application security.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

ACCU Conference

Common Webapp Vulnerabilities and What to Do About Them

Explore common web app vulnerabilities and practical mitigations based on the OWASP Top 10 List, focusing on injection attacks, authentication issues, and data exposure risks.

• YouTube
• 1 hour 30 minutes
• On-Demand
• Conference Talk

Serverless Security Top 10

Explore top 10 serverless security risks, their impact, and mitigation strategies. Gain insights into cloud evolution and emerging vulnerabilities in serverless architectures.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

LASCON

OWASP Top 10 2017 - Security Vulnerabilities A4 to A8 - Part 3 of 5

Explore OWASP Top 10 vulnerabilities A4 to A8, gaining insights into critical web application security risks and effective mitigation strategies.

• YouTube
• 1 hour 18 minutes
• On-Demand
• Free Video

Black Hat

We R in a Right Pickle With All These Insecure Serialization Formats

Explore the security vulnerabilities of bytecode-driven serialization formats, with a deep dive into Python's pickle and R's RDS format, revealing never-before-seen insights into these widely used but potentially insecure tools.

• YouTube
• 40 minutes
• On-Demand
• Free Video