Security BSides San Francisco Courses

How to CTF Infra - Beyond the Challenges and Flags

Explore the infrastructure behind Capture The Flag competitions, including user registration, flag submission, and scoreboard management for event organizers.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Building Production-Grade End to End Encrypted Applications

Insights on building end-to-end encrypted applications, addressing challenges in security, compliance, abuse prevention, availability, and observability for privacy-focused collaborative products.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Hackers Don't Care About Scope

Explore the limitations of narrow bug bounty scopes and learn why expanding them can enhance security, as hackers and cybercriminals don't adhere to predefined boundaries.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

The State of Blockchain Security - 2023 Edition

In-depth analysis of major blockchain security incidents, trends, and opportunities in DeFi, exchanges, and blockchain ecosystems for 2023, offering insights into this evolving field.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Placeholder for Dayzzz

Explore vulnerabilities in support systems and live chat services by exploiting placeholders to extract sensitive user data, as demonstrated by Rojan Rijal's research findings.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Using Machine Learning to Detect Sensitive Documents on SharePoint

Explore machine learning techniques for identifying sensitive documents on SharePoint, addressing insider threats and data exfiltration risks while discussing unique challenges in security-focused ML model development.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

New Apps, Good Snacks - Effective Threat Modeling for New Territory

Explore effective threat modeling techniques for new features and devices, focusing on team education, security communication, and creating understandable models for diverse audiences.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Sure, Let Business Users Build Their Own. What Could Go Wrong?

Explore the risks and challenges of empowering business users with Low-Code/No-Code platforms, examining potential security implications and enterprise-wide impacts.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

The Big "P" Problem in Cybersecurity

Explore the growing trend of cybersecurity professionals leaving the field, understand the underlying causes, and discover potential solutions to address this critical industry challenge.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

FAIR STRIDE - Building Business Relevant Threat Models

Explore FAIR STRIDE, a method for creating application threat models to determine ROI on security controls and prioritize risk reduction efforts for scalable product security.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Overwatch - A Serverless Approach to Orchestrating Your Security Automation

Discover Overwatch: a serverless security orchestration solution in Go, simplifying CI management and infrastructure maintenance for lean security teams shifting left.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

MTV Reboot - My Super Sweet 16-Bit Malware - MS-DOS Edition - TSR Remix

Deep-dive analysis of MS-DOS malware, exploring infection techniques, stealth mechanisms, and persistence methods. Highlights technical complexity and graphical displays in 16-bit DOS malware through reverse-engineering.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Sleeping With One AI Open - An Introduction to Attacks Against Artificial Intelligence and Machine Learning

Explore vulnerabilities in AI systems and learn about various attacks on machine learning algorithms, their potential impacts, and the importance of AI security awareness.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Growing Your Skillset with Capture the Flag

Strategies for maximizing learning in Capture the Flag competitions, including tips for beginners and insights from an organizer's perspective on tackling new topics effectively.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

HALT AND CATCH FIRE - Social Engineering CTFs for Fun to a Job as a Professional Red Team Social Engineer

Explore the transition from social engineering competitions to professional red team engagements, examining the differences in tactics, strategies, and real-world applications.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk