Security BSides San Francisco Courses

Five Keys to Building an Application Security Program in the Age of DevOps

Discover strategies for integrating security into DevOps practices, balancing risk management with rapid development, and implementing automated security measures for more secure code delivery.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Bypassing Malware Analysis Sandboxes Is Easy - Let’s Discuss How They Are Doing It and Why It Works

Explore techniques used by malware to evade analysis sandboxes, comparing various sandbox solutions and their effectiveness in detecting and analyzing different types of malware.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Assessing the Embedded Devices On Your Network

Explore embedded device security challenges, threat modeling, and assessment techniques through a VoIP phone case study. Learn hardware tricks, debugging methods, and potential mitigations for vulnerabilities.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

When Bandit Strikes - Defend Your Python Code

Discover and defend against common security flaws in Python code using Bandit. Learn customization, CI pipeline integration, and extension techniques for enhanced code security.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Swimming Upstream - Regulation vs Security

Strategies for navigating regulatory challenges in security, balancing compliance with effective security practices across industries. Insights on driving change and achieving security goals.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

A Year in the Wild - Fighting Malware at the Corporate Level

Explore Yelp's automated malware defense system, featuring in-house tools like AIR and OSXCollector, complemented by open-source solutions for swift threat detection and response in corporate networks.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Sweet Security - Deploying a Defensive Raspberry Pi

Explore open-source tools and inexpensive hardware like Raspberry Pi to monitor, protect, and mitigate threats in IoT environments, addressing security challenges of outdated devices.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Fraud Detection and Real-time Trust Decisions

Explore fraud detection techniques in online commerce, from traditional attacks to real-time marketplace challenges. Learn about combating fraud and its parallels with network security.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Fuzz Smarter, Not Harder - An AFL-Fuzz Primer

Comprehensive guide to efficient fuzzing using afl-fuzz, covering instrumentation techniques, optimization strategies, and crash analysis for effective bug hunting and software security testing.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Elliptic Curve Cryptography for Those Who Are Afraid of Math

Demystifying Elliptic Curve Cryptography: Learn the basics, understand its applications, and grasp the importance of ECC expertise without delving into complex mathematics.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Employee Hijacking - Building a Hacktober Awareness Program

Engaging Hacktober program teaches employees security awareness through interactive hacking exercises, prizes, and fun activities, improving human defense against cyber threats.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Developing a Rugged DevOps Approach to Cloud Security

Strategies for integrating continuous security into DevOps processes, emphasizing automation, monitoring, and agile security practices for cloud environments.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Digital Intel Gathering - OSINT for Blue - Red Teams

Explore OSINT techniques for cybersecurity, leveraging social media and public records to enhance threat intelligence and defensive strategies.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

The Art of the Jedi Mind Trick

Explore effective communication techniques for security professionals to convey messages to management, overcome obstacles, and drive real change in organizations.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Using Behavior to Protect Cloud Servers

Explore behavior-based analytics for cloud server security, focusing on dynamic privilege management to identify and prevent insider threats and privilege escalation attacks in real-time.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk