Security BSides San Francisco Courses

Go With The -Work-flow

Unveiling security risks in cloud workflow platforms: misconfigurations, credential exposure, data leakage, insecure coding, and containerized malware. Eye-opening research for IT professionals.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

Embracing Risk Responsibly - Moving Beyond Inflexible SLAs and Exception Hell by Treating Security Vulnerabilities and Risk Like Actual Debt

Discover how to treat security vulnerabilities as debt, moving beyond rigid SLAs and exception overload. Learn strategies for responsible risk management in cybersecurity.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Biohacker - The Invisible Threat

Exploring the emerging threat of biohacking: how human implants can compromise contactless technology and pose risks to physical and digital security systems.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Redefining Threat Modeling - Security Team Goes on Vacation

Discover innovative approaches to scale threat modeling programs without compromising quality. Learn strategies for efficient security practices that empower teams and enhance overall effectiveness.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

CTF Writeup - Log 'em All

Detailed walkthrough of a challenging Hacking/Reverse Engineering CTF challenge inspired by a Pokemon Red bug, with step-by-step instructions for setup and execution.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Offensive Javascript Techniques for Red Teamers

Explore advanced JavaScript techniques for network reconnaissance and exploitation, focusing on rapid execution and targeting internal vulnerabilities from external sources.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

How Software Transparency Can Help Save the World

Explore software transparency through SBOMs, enhancing vulnerability management and supply chain visibility. Learn how this approach can revolutionize cybersecurity and software development practices.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

A Look at Jython-Enhanced Reverse Engineering with Ghidra

Explore Jython scripting in Ghidra for efficient malware analysis, using real-world examples to enhance reverse engineering techniques and streamline the process of analyzing obfuscated binaries.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Dispatch - Crisis Management Automation When Everything is On Fire

Explore Dispatch, an automation tool for crisis management lifecycles, streamlining incident response from initial report to post-incident review.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Leveraging Osquery for DFIR at Scale

Explore efficient incident response using Osquery for digital forensics, accelerating breach investigations and uncovering attacker breadcrumbs in large-scale environments.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

Sharks in the Water - Open Source Component Risk and Mitigation

Explore open source component risks and mitigation strategies, focusing on supply chain vulnerabilities, recent hacks, and preventive measures through education and automated tooling.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Managing the Assets of Your Security Career

Strategies for career growth in cybersecurity: improving influence, visibility, and promotion chances through effective stakeholder management and asset tracking techniques.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

How to 10X Your Company's Security - Without a Series D

Discover actionable strategies to dramatically enhance your company's security posture without significant financial investment. Learn from distilled insights and lessons from DevSecOps and modern AppSec experts.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

What's New or Not in 2020 - Are We Making Progress on the Intractable Security Problems

Insightful keynote examining the progress and challenges in Information Security over the past decade, highlighting achievements and persistent issues facing professionals in the field.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

2FA in 2020 and Beyond

Explore the modern 2FA landscape with data-driven analysis, comparing security strength and user experience of various authentication methods like SMS, soft tokens, push, and WebAuthn.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk