Security BSides San Francisco Courses

MTV Reboot - My Super Sweet 16-Bit Malware - MS-DOS Edition - TSR Remix

Deep-dive analysis of MS-DOS malware, exploring infection techniques, stealth mechanisms, and persistence methods. Highlights technical complexity and graphical displays in 16-bit DOS malware through reverse-engineering.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Sleeping With One AI Open - An Introduction to Attacks Against Artificial Intelligence and Machine Learning

Explore vulnerabilities in AI systems and learn about various attacks on machine learning algorithms, their potential impacts, and the importance of AI security awareness.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

Growing Your Skillset with Capture the Flag

Strategies for maximizing learning in Capture the Flag competitions, including tips for beginners and insights from an organizer's perspective on tackling new topics effectively.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

HALT AND CATCH FIRE - Social Engineering CTFs for Fun to a Job as a Professional Red Team Social Engineer

Explore the transition from social engineering competitions to professional red team engagements, examining the differences in tactics, strategies, and real-world applications.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Security Compliance as Code

Explore how to transform security compliance frameworks into code, streamlining processes and reducing burden on engineering teams while maintaining industry standards and customer trust.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Career Village - Tales from a Hiring Manager

Gain valuable insights on interviewing dos and don'ts from an experienced hiring manager's perspective, enhancing your chances of success in the job market.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

HSMs in Plain Envelopes - A Code Signing Story

Explore the challenges of code signing for open source developers, addressing outdated mechanisms and high costs while examining the complexities and frustrations involved in the process.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

Security Hiring Trends

Explore current security hiring trends, including top-paying industries, in-demand skills, and strategies for landing interviews and securing job offers in the evolving tech landscape.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Hunting Supply Chain Threats Using Anomaly Detection

Explore a case study on detecting supply chain threats through anomaly detection in Cloud API logs, offering insights into advanced cybersecurity techniques.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

How Do You Trust Your Open Source Software?

Explore OpenSSF Scorecard, an automated tool assessing software security heuristics. Learn how it evaluates dependencies and identifies areas for improving security posture in open source projects.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Level Up Your Career - A Panel on Staff+ Engineering

Expert panel discusses transitioning from Senior to Staff+ engineering in security, offering insights on career advancement and answering audience questions about high-level roles in cybersecurity.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Backup Plans for Your Backup Plans for Your Backup Plans

Explore the complexities of Business Continuity Planning, focusing on cascading risks and their impacts. Learn from space-related examples to enhance your organization's resilience and preparedness.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Certificate Transparency Logs - Roadmaps to Riches or Ruin?

Explore the dual nature of Certificate Transparency Logs in Web PKI: their role in ensuring certificate authenticity and potential misuse by malicious actors for reconnaissance.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

How Segment Proactively Protects Customer's API Keys

Discover Segment's innovative approach to safeguarding API keys, addressing the critical issue of secret leaks on GitHub and enhancing overall security for user data and actions.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Building an Endpoint Security Program from Scratch

Learn to develop a comprehensive endpoint security program to protect your organization's internal resources and data from potential threats and compromised devices.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk