Security BSides Talks & Presentations

Security BSides San Francisco

Hackers Don't Care About Scope

Explore the limitations of narrow bug bounty scopes and learn why expanding them can enhance security, as hackers and cybercriminals don't adhere to predefined boundaries.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

The State of Blockchain Security - 2023 Edition

In-depth analysis of major blockchain security incidents, trends, and opportunities in DeFi, exchanges, and blockchain ecosystems for 2023, offering insights into this evolving field.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Placeholder for Dayzzz

Explore vulnerabilities in support systems and live chat services by exploiting placeholders to extract sensitive user data, as demonstrated by Rojan Rijal's research findings.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Using Machine Learning to Detect Sensitive Documents on SharePoint

Explore machine learning techniques for identifying sensitive documents on SharePoint, addressing insider threats and data exfiltration risks while discussing unique challenges in security-focused ML model development.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

New Apps, Good Snacks - Effective Threat Modeling for New Territory

Explore effective threat modeling techniques for new features and devices, focusing on team education, security communication, and creating understandable models for diverse audiences.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Sure, Let Business Users Build Their Own. What Could Go Wrong?

Explore the risks and challenges of empowering business users with Low-Code/No-Code platforms, examining potential security implications and enterprise-wide impacts.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

The Big "P" Problem in Cybersecurity

Explore the growing trend of cybersecurity professionals leaving the field, understand the underlying causes, and discover potential solutions to address this critical industry challenge.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

FAIR STRIDE - Building Business Relevant Threat Models

Explore FAIR STRIDE, a method for creating application threat models to determine ROI on security controls and prioritize risk reduction efforts for scalable product security.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Overwatch - A Serverless Approach to Orchestrating Your Security Automation

Discover Overwatch: a serverless security orchestration solution in Go, simplifying CI management and infrastructure maintenance for lean security teams shifting left.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

MTV Reboot - My Super Sweet 16-Bit Malware - MS-DOS Edition - TSR Remix

Deep-dive analysis of MS-DOS malware, exploring infection techniques, stealth mechanisms, and persistence methods. Highlights technical complexity and graphical displays in 16-bit DOS malware through reverse-engineering.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Sleeping With One AI Open - An Introduction to Attacks Against Artificial Intelligence and Machine Learning

Explore vulnerabilities in AI systems and learn about various attacks on machine learning algorithms, their potential impacts, and the importance of AI security awareness.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Growing Your Skillset with Capture the Flag

Strategies for maximizing learning in Capture the Flag competitions, including tips for beginners and insights from an organizer's perspective on tackling new topics effectively.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

HALT AND CATCH FIRE - Social Engineering CTFs for Fun to a Job as a Professional Red Team Social Engineer

Explore the transition from social engineering competitions to professional red team engagements, examining the differences in tactics, strategies, and real-world applications.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Security Compliance as Code

Explore how to transform security compliance frameworks into code, streamlining processes and reducing burden on engineering teams while maintaining industry standards and customer trust.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Career Village - Tales from a Hiring Manager

Gain valuable insights on interviewing dos and don'ts from an experienced hiring manager's perspective, enhancing your chances of success in the job market.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk