Security BSides San Francisco Courses

Lessons Learned from Building and Running MHN, the World's Largest Crowd-sourced Honeynet

Explore insights from building the world's largest crowdsourced honeynet. Learn about deploying diverse honeypots globally, analyzing security data, and creating a distributed sensor network for tracking threats.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Collective Action Problems in Cybersecurity

Explore collective action challenges in cybersecurity with Allan Friedman, examining strategies for improved collaboration and shared responsibility in addressing digital threats.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

F-ck These Guys - Practical Counter Surveillance

Practical strategies for protecting online privacy and resisting mass surveillance through encryption and privacy technologies. Learn to safeguard your digital rights and opt out of bulk data collection.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

How SecOps Can Convince DevOps To Believe In The Bogeyman

Discover strategies for bridging the gap between security and development teams, fostering a collaborative approach to cybersecurity in organizations.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Human Hunting

Explores the importance of human-driven cybersecurity analysis over automated tools, emphasizing the need for skilled analysts to detect and counter human adversaries effectively in information security.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Ask the EFF

Explore digital civil liberties with EFF experts, covering surveillance, intellectual property, privacy, and security research. Gain insights on law and technology issues through Q&A.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Hacker or Criminal - Repairing the Reputation of the Infosec Community

Explores strategies to improve public perception of the infosec community, addressing misconceptions and highlighting positive contributions through effective media engagement and reputation management.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

GitReview - All Git Commits are Reviewed

Explore GitReview, a lightweight GitHub overlay for auditing repositories while maintaining developer flexibility and ensuring security, peer review, and approval.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

DNS Spikes, Strikes, and The Like

Explore DNS query patterns to identify potential threats using unsupervised learning methods. Learn to analyze traffic trends and distinguish malicious domains from benign spikes.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

OSXCollector - Forensic Collection and Automated Analysis for OS X

Explore OSXCollector, an open-source toolkit for automated forensic evidence collection and analysis on OS X, streamlining incident response processes for digital investigators.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Stick a Pin in Certificate Pinning - How to Inspect Mobile Traffic and Stop Data Exfiltration

Learn how certificate pinning in mobile apps can bypass security controls and explore solutions for inspecting encrypted traffic to prevent data exfiltration and attacks.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Student Surveillance - How Hackers Can Help Protect Student Privacy

Explore how educational technologies impact student privacy, examining the risks of data-intensive tools in classrooms and discussing ways hackers can help protect students' personal information.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

HIPAA 2015 - Wrath of the Audits

Explore HIPAA compliance strategies, focusing on IT and Legal collaboration, documentation, and security risk assessment to prepare for increased federal audits and protect health information.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Your Voice Confirms My Identity - Exploring Voice Authentication Security in the Age of AI

Explore AI voice cloning and its impact on voice authentication systems. Learn voice cloning techniques and discuss trends in voice security.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Army of Proxies - How Netflix Scales Identity-Based Zero Trust Architecture

Explore Netflix's evolving identity-based zero trust architecture, from novel solutions to off-the-shelf tools, emphasizing context over control in workforce security.

• YouTube
• 30 minutes
• Self-Paced
• Free Video