Security BSides San Francisco Courses

Advanced Internet Dataset Combinations for Threat Hunting and Attack Prediction

Explore advanced techniques for threat hunting and attack prediction using innovative Internet dataset combinations, moving beyond traditional methods for enhanced cybersecurity.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Weathering the Storm - The Art of Crisis Communications

Mastering crisis communications in security: strategies for effective internal and external stakeholder management during high-pressure situations.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Reducing Mixtape to Master Key Scenarios - How to Block the Dark Army from Mayhem Using API-Driven Access Control

Discover API-driven access control strategies to enhance security by eliminating "master keys" and implementing temporary, context-based privileged access in your infrastructure.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Hijacking .NET to Defend PowerShell

Explore stealthy .NET hijacking techniques for defending against PowerShell attacks, covering assembly modification, injection, profiling, and function hooking from a blue team perspective.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Five Keys to Building an Application Security Program in the Age of DevOps

Discover strategies for integrating security into DevOps practices, balancing risk management with rapid development, and implementing automated security measures for more secure code delivery.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Bypassing Malware Analysis Sandboxes Is Easy - Let’s Discuss How They Are Doing It and Why It Works

Explore techniques used by malware to evade analysis sandboxes, comparing various sandbox solutions and their effectiveness in detecting and analyzing different types of malware.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Assessing the Embedded Devices On Your Network

Explore embedded device security challenges, threat modeling, and assessment techniques through a VoIP phone case study. Learn hardware tricks, debugging methods, and potential mitigations for vulnerabilities.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

When Bandit Strikes - Defend Your Python Code

Discover and defend against common security flaws in Python code using Bandit. Learn customization, CI pipeline integration, and extension techniques for enhanced code security.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Swimming Upstream - Regulation vs Security

Strategies for navigating regulatory challenges in security, balancing compliance with effective security practices across industries. Insights on driving change and achieving security goals.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

A Year in the Wild - Fighting Malware at the Corporate Level

Explore Yelp's automated malware defense system, featuring in-house tools like AIR and OSXCollector, complemented by open-source solutions for swift threat detection and response in corporate networks.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Sweet Security - Deploying a Defensive Raspberry Pi

Explore open-source tools and inexpensive hardware like Raspberry Pi to monitor, protect, and mitigate threats in IoT environments, addressing security challenges of outdated devices.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Fraud Detection and Real-time Trust Decisions

Explore fraud detection techniques in online commerce, from traditional attacks to real-time marketplace challenges. Learn about combating fraud and its parallels with network security.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Fuzz Smarter, Not Harder - An AFL-Fuzz Primer

Comprehensive guide to efficient fuzzing using afl-fuzz, covering instrumentation techniques, optimization strategies, and crash analysis for effective bug hunting and software security testing.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Elliptic Curve Cryptography for Those Who Are Afraid of Math

Demystifying Elliptic Curve Cryptography: Learn the basics, understand its applications, and grasp the importance of ECC expertise without delving into complex mathematics.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Employee Hijacking - Building a Hacktober Awareness Program

Engaging Hacktober program teaches employees security awareness through interactive hacking exercises, prizes, and fun activities, improving human defense against cyber threats.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk