Security BSides San Francisco Courses

Red Team Tales - 7 Years of Physical Penetration Testing

Discover untold stories, innovative bypasses, and social engineering techniques from 7 years of physical penetration testing. Gain insights into defeating security measures through real-world examples.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Achieving the Web Isolation Nirvana - How Far Along Are We?

Explore browser isolation mechanisms, their effectiveness, and future directions for enhancing web application security against untrusted code and third-party attacks.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Detection-as-Code - Why It Works and Where to Start

Explore detection-as-code principles for efficient security operations, leveraging version control, test-driven development, code reuse, and automated workflows in detection and response teams.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Buying Security - A Client's Guide

Comprehensive guide for effective security program implementation, focusing on vendor selection, value optimization, and marketplace insights from both client and vendor perspectives.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Attacking and Defending Infrastructure with Terraform - How We Got Admin Across Cloud Environments

Explore techniques for attacking and defending Terraform infrastructure, including secret exfiltration and deploying malicious applications, with insights on mitigating vulnerabilities in cloud environments.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Building Intelligent Automatons with Semantic Reasoning and Horse Glue

Explore graph-based ontologies and semantic reasoning to revolutionize security data analysis, consolidate information, and automate logical conclusions for more efficient cybersecurity workflows.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

So You Think You Can Patch - The Game Show that Questions Your Security Assumptions

Explore the complexities of security patching through a game show format. Experts discuss challenges, policies, and solutions for effective patch management in modern enterprises.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Rise of Coinminers

Exploring the rise of coinminers: their impact, technical aspects, detection methods, and defensive strategies. Insights into tracking campaigns, profits, and future predictions for this emerging cybersecurity threat.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Simple - Open - Mobile - A Look at the Future of Strong Authentication

Explore the future of strong authentication with FIDO U2F and FIDO 2 standards, offering simplicity and security for online users while addressing the limitations of traditional hardware tokens.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

The Tales of a Bug Bounty Hunter

Explore advanced mobile security techniques and real-world vulnerabilities in Instagram, with insights on bug bounty hunting, responsible disclosure, and prevention strategies in the software development lifecycle.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Scan Pwn Next! - Exploiting Service Accounts in Windows

Exploiting Windows service accounts: mismanagement risks, detection techniques, and prevention strategies. Includes live demonstrations and introduces an open-source tool for vulnerability assessment in networks.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

In the Crosshairs - The Trend Towards Targeted Attacks

Explore the rise of targeted cyber attacks, their effectiveness, and economic advantages. Learn about real-world examples and strategies to counter this growing threat.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Access Control in 2016 - Deep Dive

Deep dive into advanced access control approaches, exploring complexities, limitations of traditional methods, and new strategies for effective implementation in modern IT environments.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Advanced Techniques for Real Time Detection of Polymorphic Malware

Explore advanced techniques for detecting polymorphic malware in real-time, including approximation matching algorithms and bloom filters. Compare efficiency and performance of various methods for fast identification and classification.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Everything Is Awful - And You're Not Helping

Humorous exploration of security failures and cynicism in the tech industry, highlighting common pitfalls and the challenges of creating truly secure systems.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk