Security BSides San Francisco Courses

Automating Web Application Bug Hunting

Discover techniques for automating web application vulnerability scanning to enhance bug bounty hunting and application security analysis efficiency.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Securing Online Identities with Simple, Secure, Open Standards

Explore the evolution of online identity security, from U2F to FIDO2, and learn how open standards are shaping the future of passwordless authentication across devices.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Deploying Two-Factor Authentication to Millions of Users

Comprehensive guide on implementing two-factor authentication for large-scale websites, covering design, architecture, and various methods like TOTP, push notifications, and FIDO security keys.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

How to Build an Application Security Program

Practical insights on creating and improving application security programs, drawing from 20 years of experience across various sectors. Covers successful strategies and pitfalls to avoid.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Conquer the Enterprise from Inside

Explore penetration testing dropboxes: types, setup, and attacks. Learn how these tools simulate internal threats, uncover security gaps, and benefit both red and blue teams in enterprise environments.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Abusing WCF Endpoint for RCE and Privilege Escalation

Explore WCF vulnerabilities in .NET programs, focusing on privilege escalation and remote code execution. Learn to identify and exploit these bugs through a real-world case study.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Containers - Your Ally in Improving Security

Explore built-in security tactics for Kubernetes and Docker, including automated configurations, read-only filesystems, and limiting cross-container communications to enhance service security.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

How to Orchestrate a Cyber Security Incident Tabletop Exercise

Interactive presentation on orchestrating cyber security incident tabletop exercises, focusing on "assume breach" scenarios and guiding participants through simulated timelines and decision-making processes.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Lyft Cartography - Automating Security Visibility and Democratization

Explore Lyft's open-source security intelligence platform for asset tracking, relationship mapping, and automated decision-making. Learn how it improves visibility and empowers teams to enhance security posture.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

A Deep Dive into Go Malware - Using Metadata to Empower the Analyst

Explore Go malware's unique characteristics, metadata analysis techniques, and insights into malware authorship through examination of stripped Go binaries and their structural elements.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Profiling VIP Accounts Access Patterns in User-Centric Data Streams

Innovative real-time analysis technique for detecting compromised privileged accounts using Kafka streaming, enabling scalable, per-account risk assessment and evolving individual risk profiles.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Anti-Privacy Anti-Patterns

Exploring data collection practices, privacy implications, and the need for perspective shifts in digital privacy. Examines research findings, technological innovations, and the impact of seemingly harmless data.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Do You Even Tech Anymore - Management & Leadership in Security

Insights on transitioning from engineering to management in security, addressing challenges, self-doubt, and maintaining technical relevance while developing leadership skills and fostering a collaborative team culture.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Do Androids Dream of Electric Fences?

Explore Android enterprise security features, threats, and best practices for protecting users in organizations. Learn how Google implements these measures and where to begin enhancing your security.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

How to Fix the Diversity Gap in Cybersecurity

Explore strategies to address the cybersecurity diversity gap, examining unconscious bias, underrepresented experiences, and actionable steps to increase and retain qualified candidates from diverse backgrounds.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk