BSidesLV Courses

Managing Security with the OWASP Assimilation Project

Explore continuous discovery, scalability, and human monitoring in cybersecurity with the OWASP Assimilation Project. Learn about architecture, attack surface analysis, and practical demonstrations.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Network Access Control - The Company-Wide Team Building Exercise That Only You Know About

Learn to implement Network Access Control effectively, involving various teams and overcoming challenges. Gain insights on recruiting allies, achieving quick wins, and troubleshooting common issues.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Reverse Engineering a DOS PC FMV Game from 1994

Explore the intricacies of reverse engineering a 1994 DOS PC FMV game, uncovering techniques and challenges in dissecting vintage software architecture.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Please Inject Me - A x64 Code Injection

Explore advanced x64 code injection techniques, focusing on practical implementation and security implications in modern Windows systems.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Securing Fast and Furious DevOps Pipelines

Learn strategies to secure DevOps pipelines without compromising speed, focusing on integrating security measures seamlessly into fast-paced development workflows.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Password Surveys Are Shit

Explore the flaws in password surveys and their impact on security practices. Learn about better approaches to assess and improve password policies.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Beyond Logs and Time Series - Observability for Security & Privacy

Explore advanced observability techniques for enhanced security and privacy, moving beyond traditional logs and time series data to improve threat detection and investigation.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Target Rich Cyber Poor

Explore cyber hygiene services, software bill of materials, and sector-specific advice for resource-constrained organizations. Learn about challenges and solutions in cybersecurity for critical infrastructure.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Penetration Testing Experience and How to Get It

Discover strategies for gaining and showcasing penetration testing experience, overcoming imposter syndrome, and navigating HR in the cybersecurity field.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Code Dependency - Chinese APTs in Software Supply Chain Attacks

Explore Chinese APTs' tactics in software supply chain attacks, examining notable incidents, code breakdowns, and open-source vulnerabilities to understand and mitigate these sophisticated threats.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

How to Win Over Executives and Hack the Board

Learn strategies to effectively communicate cybersecurity risks and initiatives to executives, enabling better decision-making and business alignment in the digital age.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Breaking the Giants With Logic

Explore logic-based vulnerabilities in major platforms, focusing on duplicates and business logic flaws. Learn techniques to identify and exploit these weaknesses through real-world case studies.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Do You Understand the Words That Are Coming Out of My Mouth

Explore effective communication strategies in cybersecurity, addressing business impacts, vulnerabilities, and solutions for various threats including phishing, insider risks, and ransomware attacks.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

All Software is Open Source - An Introduction to Reverse Engineering

Explore reverse engineering fundamentals, tools, and strategies for information security. Learn legal aspects, safe practices, and real-world applications through war stories and CTF challenges.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

A Serverless SIEM - Detecting All Baddies

Explore a serverless SIEM for efficient threat detection, covering log ingestion, analysis, notifications, and automations in cloud-native environments.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk