Security BSides San Francisco Courses

Read the Fantastic Manual - Writing Security Docs People Will Actually Read

Strategies for creating effective security documentation that people will read and use. Covers identifying needs, iterative creation, and measuring success in technical writing.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Go With The -Work-flow

Unveiling security risks in cloud workflow platforms: misconfigurations, credential exposure, data leakage, insecure coding, and containerized malware. Eye-opening research for IT professionals.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Embracing Risk Responsibly - Moving Beyond Inflexible SLAs and Exception Hell by Treating Security Vulnerabilities and Risk Like Actual Debt

Discover how to treat security vulnerabilities as debt, moving beyond rigid SLAs and exception overload. Learn strategies for responsible risk management in cybersecurity.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Biohacker - The Invisible Threat

Exploring the emerging threat of biohacking: how human implants can compromise contactless technology and pose risks to physical and digital security systems.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Redefining Threat Modeling - Security Team Goes on Vacation

Discover innovative approaches to scale threat modeling programs without compromising quality. Learn strategies for efficient security practices that empower teams and enhance overall effectiveness.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

CTF Writeup - Log 'em All

Detailed walkthrough of a challenging Hacking/Reverse Engineering CTF challenge inspired by a Pokemon Red bug, with step-by-step instructions for setup and execution.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Offensive Javascript Techniques for Red Teamers

Explore advanced JavaScript techniques for network reconnaissance and exploitation, focusing on rapid execution and targeting internal vulnerabilities from external sources.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

A Look at Jython-Enhanced Reverse Engineering with Ghidra

Explore Jython scripting in Ghidra for efficient malware analysis, using real-world examples to enhance reverse engineering techniques and streamline the process of analyzing obfuscated binaries.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Dispatch - Crisis Management Automation When Everything is On Fire

Explore Dispatch, an automation tool for crisis management lifecycles, streamlining incident response from initial report to post-incident review.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Sharks in the Water - Open Source Component Risk and Mitigation

Explore open source component risks and mitigation strategies, focusing on supply chain vulnerabilities, recent hacks, and preventive measures through education and automated tooling.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Managing the Assets of Your Security Career

Strategies for career growth in cybersecurity: improving influence, visibility, and promotion chances through effective stakeholder management and asset tracking techniques.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

How to 10X Your Company's Security - Without a Series D

Discover actionable strategies to dramatically enhance your company's security posture without significant financial investment. Learn from distilled insights and lessons from DevSecOps and modern AppSec experts.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

2FA in 2020 and Beyond

Explore the modern 2FA landscape with data-driven analysis, comparing security strength and user experience of various authentication methods like SMS, soft tokens, push, and WebAuthn.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

How to Write Like It's Your Job

Practical advice for security professionals on improving technical writing skills, from starting to finishing, with tools and tips for presenting professional work.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Privacy Nightmares while Using ML - AI in Your Applications

Explore privacy challenges in ML/AI applications and learn about a framework that integrates data security with machine learning technologies to address potential nightmares.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk