Security BSides San Francisco Courses

Hacking with a Heads Up Display

Explore OWASP ZAP's Heads Up Display, a browser-integrated security testing tool designed to make security testing more accessible and user-friendly for developers, QA, and hackers.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Attacking Deep Learning-Based NLP Systems

Explore vulnerabilities in deep learning NLP systems, focusing on word embeddings. Learn to manipulate training data and inject into real-world applications, with emphasis on security implications.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Arcades and Audits - What Gaming Can Do for Your Security Posture

Explore gamification techniques for enhancing security audits and disaster preparedness, combining arcade game benefits with operational resilience strategies for engaging and effective training.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

High Performance VM Introspection

Innovative approach to enhance VM introspection performance using in-guest agent and virtualization exception mechanism, addressing security challenges in hypervisor-based solutions.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Security Automation Simplified

Practical guide to implementing security automation using existing tools and basic coding, demonstrating how to streamline SecOps processes and save time without relying on expensive products.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Bye-Bye False Positives - Using AI to Improve Detection

Explore AI-based injection detection using neural networks to reduce false positives in security solutions. Learn about architecture, implementation, and real-world applications.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

The Secure Metamorphosis - Streaming Logs with Kafka and TLS

Explore Kafka's TLS configuration for secure, high-performance log streaming. Learn best practices, authentication methods, and troubleshooting techniques for a robust messaging system.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Slack App Security - Securing Your Workspaces From a Bot Uprising

Explore Slack app security, risks, and safeguards. Learn about the app directory, unique challenges, and Slack's efforts to enhance workspace protection against potential threats.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Offensive Javascript Techniques for Red Teamers

Explore advanced JavaScript techniques for red team operations, including browser exploitation, network reconnaissance, and crafting payloads to target internal vulnerabilities quickly and effectively.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Goldilocks and the Three ATM Attacks

Explore three ATM attack case studies, from poor security to zero-day exploits, revealing vulnerabilities and prevention strategies in modern ATM systems.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Back to the SOCless Future

Explore Twilio's journey towards automated security operations, featuring insights on scalable 24/7 monitoring and a serverless automation framework for effective threat response.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

How to Lose a Container in 10 Minutes

Explore container security challenges, common deployment mistakes, and real-time vulnerabilities in cloud environments with practical examples and live demonstrations.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Ferris Bueller's Guide to Abuse Domain Permutations

Explore techniques for detecting and defending against domain permutation attacks, including homoglyphs and typo-squats, to enhance cybersecurity and prevent fraud.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Vendor Security - Where Our Data Goes We Follow

Explore vendor security challenges and solutions with experts from diverse companies. Learn about assessment methods, influencing vendors, scaling programs, and predicting security maturity in partner organizations.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Contact Center Authentication

Explore best practices for secure phone authentication in contact centers, covering research findings, real-world examples, and innovative solutions to enhance customer and agent experiences.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk