Security BSides San Francisco Courses

Transform Your Presentation Skills

Enhance your public speaking with expert tips on confidence, audience engagement, and effective slide design for impactful presentations in the tech industry.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

The GCP Metadata API - Security Considerations, Vulnerabilities, and Remediations

Explore GCP Metadata API security: risks, attacks, defenses, and best practices. Learn about service accounts, Kubernetes, and Cloud Build implications for your organization's cloud infrastructure.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Chrome Extension Risks and You

Explore Chrome extension risks, malicious examples, and Lyft's strategic approach to mitigate threats at scale. Learn effective strategies for enhancing browser security.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Hanging on the Telephone - Hacking VoIP

Explore VoIP vulnerabilities and hacking techniques, from historical phone phreaking to modern threats like toll fraud and vishing, with insights on protecting communication systems.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

An Effective Approach to Software Obfuscation

Explore effective software obfuscation techniques, their limitations, and a novel approach to enhance code protection against reverse engineering and analysis.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

WHOIS Calling the 80s to Get Their Finger Back

Explore creating a remote access trojan using TCP services like Whois and Finger, discussing implementation, detection, and mitigation strategies for this Live Off the Land technique.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Beyond AV - Detection-Oriented File Analysis

Explore advanced file analysis techniques for enhanced threat detection, focusing on Strelka's features and applications in enterprise security.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

All Your Containers Are Belong to Us

Explore container orchestration security risks, focusing on exposed management nodes and APIs. Learn implications, recommendations, and see demonstrations of potential exploits in popular platforms.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Friend or Replicant - How Attackers Automate and Disguise Themselves

Explore the tactics behind fake online accounts, from creation to manipulation, and learn how attackers exploit various vectors to influence the digital landscape at scale.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Two-Faces of WASM Security

Explore WebAssembly's dual nature: its potential for malicious use in sophisticated attacks and the vulnerabilities it introduces, presenting challenges for both users and web developers.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Cats in My Certificate Transparency Logs

Explore Certificate Transparency logs: their purpose, functionality, and potential misuse. Learn about SCTs, public keys, and novel applications, including finding cat pictures online.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Hacking with a Heads Up Display

Explore OWASP ZAP's Heads Up Display, a browser-integrated security testing tool designed to make security testing more accessible and user-friendly for developers, QA, and hackers.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Attacking Deep Learning-Based NLP Systems

Explore vulnerabilities in deep learning NLP systems, focusing on word embeddings. Learn to manipulate training data and inject into real-world applications, with emphasis on security implications.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Arcades and Audits - What Gaming Can Do for Your Security Posture

Explore gamification techniques for enhancing security audits and disaster preparedness, combining arcade game benefits with operational resilience strategies for engaging and effective training.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

High Performance VM Introspection

Innovative approach to enhance VM introspection performance using in-guest agent and virtualization exception mechanism, addressing security challenges in hypervisor-based solutions.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk