Security BSides San Francisco Courses

Making of the BSides SF Astronaut Badge

Explore the creation of BSidesSF's Astronaut Badge, from technical aspects to logistics, and learn about innovative PCB printing with colorful artwork.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

When is a Vulnerability Not a Vulnerability? Overcoming the Inundation of Noisy Supply Chain Security Alerts

Explore a counterintuitive approach to strengthening security by ignoring over 90% of vulnerability alerts, enabling improved workflows and behavior in supply chain security management.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Achieving the Web Isolation Nirvana - How Far Along Are We?

Explore browser isolation mechanisms, their effectiveness, and future directions for enhancing web application security against untrusted code and third-party attacks.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Detection-as-Code - Why It Works and Where to Start

Explore detection-as-code principles for efficient security operations, leveraging version control, test-driven development, code reuse, and automated workflows in detection and response teams.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Buying Security - A Client's Guide

Comprehensive guide for effective security program implementation, focusing on vendor selection, value optimization, and marketplace insights from both client and vendor perspectives.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Attacking and Defending Infrastructure with Terraform - How We Got Admin Across Cloud Environments

Explore techniques for attacking and defending Terraform infrastructure, including secret exfiltration and deploying malicious applications, with insights on mitigating vulnerabilities in cloud environments.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Building Intelligent Automatons with Semantic Reasoning and Horse Glue

Explore graph-based ontologies and semantic reasoning to revolutionize security data analysis, consolidate information, and automate logical conclusions for more efficient cybersecurity workflows.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

So You Think You Can Patch - The Game Show that Questions Your Security Assumptions

Explore the complexities of security patching through a game show format. Experts discuss challenges, policies, and solutions for effective patch management in modern enterprises.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Rise of Coinminers

Exploring the rise of coinminers: their impact, technical aspects, detection methods, and defensive strategies. Insights into tracking campaigns, profits, and future predictions for this emerging cybersecurity threat.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Simple - Open - Mobile - A Look at the Future of Strong Authentication

Explore the future of strong authentication with FIDO U2F and FIDO 2 standards, offering simplicity and security for online users while addressing the limitations of traditional hardware tokens.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

The Tales of a Bug Bounty Hunter

Explore advanced mobile security techniques and real-world vulnerabilities in Instagram, with insights on bug bounty hunting, responsible disclosure, and prevention strategies in the software development lifecycle.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Scan Pwn Next! - Exploiting Service Accounts in Windows

Exploiting Windows service accounts: mismanagement risks, detection techniques, and prevention strategies. Includes live demonstrations and introduces an open-source tool for vulnerability assessment in networks.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

In the Crosshairs - The Trend Towards Targeted Attacks

Explore the rise of targeted cyber attacks, their effectiveness, and economic advantages. Learn about real-world examples and strategies to counter this growing threat.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Access Control in 2016 - Deep Dive

Deep dive into advanced access control approaches, exploring complexities, limitations of traditional methods, and new strategies for effective implementation in modern IT environments.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Advanced Techniques for Real Time Detection of Polymorphic Malware

Explore advanced techniques for detecting polymorphic malware in real-time, including approximation matching algorithms and bloom filters. Compare efficiency and performance of various methods for fast identification and classification.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk