Security BSides San Francisco Courses

Lessons Learned While Building a Privacy Operations Center at Headspace Health

Insights on creating a Privacy Operations Center in digital healthcare, addressing global regulations and overcoming challenges in data protection and compliance.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Secret Hunting

Discover techniques for finding, rotating, and safely managing secrets in applications. Learn best practices for secure secret storage and handling compromised credentials.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

To Normalized Logs, and Beyond - Building a Threat Detection Platform from Scratch

Deep dive into building a scalable, lean threat detection pipeline. Learn automation techniques for data ingestion, detections-as-code, and filtering to create a serverless platform for effective threat detection.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

The Expanding Universe of Cyber Threats

Explore cyber threat intelligence as a solution for managing the rapidly expanding threat landscape, prioritizing threats, and providing actionable insights to decision-makers in enterprise security.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Sandboxes All the Way Down - A Hitchhiker's Guide to Platform Containment

Explore modern sandboxes and isolation primitives for enhanced security. Learn when and how to use containment tools, with practical insights for immediate implementation.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

The Best Defense is a Great Offense - Leveraging Automated OffSec to Build Proactive C2 Detections

Learn to develop proactive Command & Control (C2) threat detections using automated offensive security techniques. Explore push-button infrastructure for simulating complex attacker behaviors and generating high-fidelity signals.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Defining a Data Masking Framework at Scale

Explore tokenization and obfuscation as data security techniques, addressing challenges in implementing large-scale frameworks alongside conventional encryption methods.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

First Security Hire - Building a Security Roadmap and Team from Scratch

Expert insights on building a security program and fostering cybersecurity culture in early-stage companies, covering roadmap creation and team development from scratch.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Advanced Attack Vectors in Azure Environments

Explore privilege escalation techniques in Azure's integrated ecosystem. Learn core concepts and advanced attack vectors for enhanced cloud security awareness.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Lost in Space - How to Navigate Corporate Security as an Engineer

Insights from a backend engineer turned security professional on navigating corporate security, effective communication, and maximizing your new role beyond day-to-day engineering tasks.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Securing the Pipeline - Protecting Self-Hosted GitHub Runners

Learn to secure self-hosted GitHub runners, mitigate risks of compromised access tokens, and implement key configuration adjustments to protect CI/CD pipelines from potential network breaches.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

New Face, Who Dis? - Recent Adversarial Approaches to Facial Recognition

Explore recent adversarial techniques to protect facial biometrics, including an open-source mobile app demonstration for real-world privacy preservation against facial recognition.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

No Adversaries - Getting Users on Your Side for Tough Transformations

Strategies for effectively communicating complex technical information to diverse audiences, focusing on user motivation and tailored approaches for successful implementation of transformative solutions.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

WebAuthn, Yubikeys, and You - What We Wish We Knew Before Rolling Out WebAuthn for Internal Use

Insights from Discord's implementation of WebAuthn and Yubikeys for enhanced internal security. Learn about challenges, best practices, and lessons learned in deploying FIDO2/WebAuthn as a superior MFA solution.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Take The Helm - Guidance For Prospective Future CISOs

Expert panel shares insights on becoming a first-time CISO or Head of Security, covering preparation, pursuit, and success strategies for aspiring security leaders.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk