Security BSides Talks & Presentations

BSidesLV

Code Dependency - Chinese APTs in Software Supply Chain Attacks

Explore Chinese APTs' tactics in software supply chain attacks, examining notable incidents, code breakdowns, and open-source vulnerabilities to understand and mitigate these sophisticated threats.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

BSidesLV

How to Win Over Executives and Hack the Board

Learn strategies to effectively communicate cybersecurity risks and initiatives to executives, enabling better decision-making and business alignment in the digital age.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

BSidesLV

Breaking the Giants With Logic

Explore logic-based vulnerabilities in major platforms, focusing on duplicates and business logic flaws. Learn techniques to identify and exploit these weaknesses through real-world case studies.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

BSidesLV

Do You Understand the Words That Are Coming Out of My Mouth

Explore effective communication strategies in cybersecurity, addressing business impacts, vulnerabilities, and solutions for various threats including phishing, insider risks, and ransomware attacks.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

BSidesLV

All Software is Open Source - An Introduction to Reverse Engineering

Explore reverse engineering fundamentals, tools, and strategies for information security. Learn legal aspects, safe practices, and real-world applications through war stories and CTF challenges.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

BSidesLV

A Serverless SIEM - Detecting All Baddies

Explore a serverless SIEM for efficient threat detection, covering log ingestion, analysis, notifications, and automations in cloud-native environments.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

BSidesLV

Ghost DMA Attack & The SeDeFuS Conundrum

Explore Ghost DMA attacks, their mechanisms, and mitigations. Learn about the SeDeFuS conundrum and its implications for system security in this technical presentation.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

BSidesLV

Latest Threats and Vulnerabilities to Mission-Critical SAP Applications

Explore latest threats to mission-critical SAP applications, including cloud vulnerabilities, attack lifecycles, and remediation strategies. Gain insights from research labs and real-world examples.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

BSidesLV

You Don't Have to Be Crazy to Work Here - An Honest Talk About Mental Health

Honest discussion on mental health in cybersecurity, exploring challenges, personal experiences, and effective self-care strategies for professionals in the field.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

BSidesLV

Your Critical System Is - Not? - Vulnerable - CSAF, VEX, SBOM and the Future of Advisories

Explore the future of vulnerability advisories with CSAF, VEX, and SBOM. Learn about critical system security, risk assessment, and automation in the evolving landscape of cybersecurity.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

BSidesLV

Revenge on the Worms! Towards Deception Against Automated Adversaries

Explore deception strategies against automated adversaries, focusing on finite state machines, multiple plans, and automated planners. Learn test setups, results, and future implications.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

BSidesLV

Search Engine Deoptimization with Gootloader

Explore search engine deoptimization techniques used by Gootloader malware, including compromised WordPress sites, malicious SEO, and process hollowing. Learn about server infrastructure and potential countermeasures.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

BSidesLV

How I Hacked a Bank Using Pen & Paper

Discover how a security expert exploited vulnerabilities in a Norwegian bank's systems using only pen and paper, revealing critical flaws in identity verification and account access processes.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

BSidesLV

Gamification of Tabletop Exercises

Explore innovative approaches to cybersecurity training through gamification of tabletop exercises, enhancing engagement and effectiveness in scenario-based learning.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

BSidesLV

Lessons Drawn From Cybersecurity in the Rise of Privacy Tech

Explore lessons from cybersecurity applied to privacy tech, discussing compliance, product excellence, and the evolving relationship between privacy and security in business contexts.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk