ModSecurity Courses and Certifications

LASCON

Core Rule Set for the Masses: Lessons from Taming ModSecurity Rules at Massive Scale - 2017

Insights on fine-tuning ModSecurity Core Rule Set at scale, reducing false positives, and optimizing web application firewall performance for large-scale deployments.

• YouTube
• 50 minutes
• On-Demand
• Free Online Course

HackerSploit

Nginx ModSecurity Tutorial - Nginx WAF

Learn to secure Nginx with ModSecurity, an open-source web application firewall. Explore real-time request inspection, protection against XSS and SQL injection attacks, and active monitoring for enhanced web server security.

• YouTube
• 30 minutes
• On-Demand
• Free Online Course

HackerSploit

Apache2 ModSecurity Tutorial - Apache2 WAF

Learn to secure Apache2 with ModSecurity, an open-source web application firewall. Explore real-time request inspection, prevention of common attacks, and active monitoring for enhanced web server protection.

• YouTube
• 21 minutes
• On-Demand
• Free Online Course

Application Analysis with ModSecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine. In this course, you will learn to Analyze Applications using ModSecurity.

• Pluralsight
• 24 minutes
• On-Demand
• Free Trial Available

OWASP Foundation

Practical OWASP CRS in High Security Settings

Learn to implement OWASP Core Rule Set for high-security web applications, covering WAFs, ModSecurity, logging, whitelisting, and advanced protection techniques.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Core Rule Set for the Masses

Insights on fine-tuning ModSecurity Core Rule Set for large-scale deployments, reducing false positives, and optimizing web application firewall performance.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

LASCON

Implementing AppSensor in ModSecurity

Explore advanced web application security techniques using AppSensor and ModSecurity, focusing on detection points, SQL injection prevention, and innovative defense strategies.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

OWASP Foundation

OWASP Flagship Projects - OWASP ModSecurity Core Rule Set

Explore OWASP ModSecurity Core Rule Set: web application firewall rules, paranoia levels, and project developments for enhanced security and threat protection.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Secure Your Code - Injections and Logging

This talks shows how to protect against injections and also how to monitor them by combining two of the OWASP top 10 security risks: Injections and insufficient logging & monitoring.

• Pluralsight
• On-Demand
• Free Trial Available

Black Hat

Confessions of a WAF Developer - Protocol-Level Evasion of Web App Firewalls

Explores protocol-level evasion techniques for bypassing web application firewalls, focusing on vulnerabilities in virtual patches and demonstrating real-world examples and countermeasures.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Black Hat

ModSecurity as Universal Cross-Platform Web Protection Tool

Explore ModSecurity's evolution into a cross-platform WAF, its early attack detection capabilities, and its use of OWASP Core Rule Set for protecting Apache, IIS, and nginx servers.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

nullcon

Introduction to the OWASP ModSecurity Core Rule Set

Learn about OWASP ModSecurity Core Rule Set, a powerful open-source web application firewall. Discover key features like paranoia levels and anomaly scoring, and see its effectiveness in protecting against various attacks.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Web Application Honeypot Threat Intelligence - Techniques and Implementation

Explore web application honeypots for threat intelligence, using ModSecurity and OWASP Core Rule Set to capture attacker activity and protect software against emerging threats.

• YouTube
• 31 minutes
• On-Demand
• Free Online Course

OWASP Foundation

Getting New Actionable Insights by Analyzing Web Application Firewall Triggers

Explore advanced techniques for analyzing WAF triggers to generate actionable defenses, improve security controls, and gain insights into attacker techniques using real-world case studies.

• YouTube
• 40 minutes
• On-Demand
• Free Online Course

OWASP Foundation

Introducing the OWASP ModSecurity Core Rule Set 3.0 - AppSec EU 2017

Explore OWASP ModSecurity Core Rule Set 3.0: installation, key concepts, and handling false positives for effective web application firewall protection against common attacks.

• YouTube
• 50 minutes
• On-Demand
• Free Online Course