Security BSides San Francisco
370 talks · 2012–2026 · indexed by Breach Arc Archive. Links open each talk on YouTube.
Browse with filters →- BSidesSF 2026 - "Ask the EFF" Panel (Panel) 2026
- BSidesSF 2026 - A blueprint for building a generic... (Ashwin Sidhalinganahalli, Fletcher Ramee) 2026
- BSidesSF 2026 - A Worm in the Apple: Wormable Zero-Click RCE in AirPlay... (Avi Lumelsky, Uri Katz) 2026
- BSidesSF 2026 - Against the Tyranny of Optimization: On the Stability of... (Katie Moussouris) 2026
- BSidesSF 2026 - AI as an Accountable Entity: Governing Risk When Machines Make... (Pavithra Pradip) 2026
- BSidesSF 2026 - AI for security - friend or foe? (Panel) 2026
- BSidesSF 2026 - AI-Powered AppSec: 10x Your Security Team Without Scaling... (Anshuman Bhartiya) 2026
- BSidesSF 2026 - Anatomy and Defense of LOTL Fileless Intrusions (Amol Sarwate) 2026
- BSidesSF 2026 - Architecting the Modern SOC: The Evolving AI Reality for Blue Teams (Panel) 2026
- BSidesSF 2026 - Breaking Endpoint Anti-Ransomware: Going... (Nishant Sharma, Vivek Ramachandran) 2026
- BSidesSF 2026 - Breaking Tokens: Modern Attacks on OAuth, OIDC, and JWT Auth Flows (Bhaumik Shah) 2026
- BSidesSF 2026 - Building an open source security... (Fletcher Heisler, Marcelo Elizeche Landó) 2026
- BSidesSF 2026 - CISO Series Live Podcast Recording (Panel) 2026
- BSidesSF 2026 - Closing Remarks (Reed Loden) 2026
- BSidesSF 2026 - CloudShell Hide-n-Seek: enjoying the sweet persistent... (Jenko Hwong, Chris Ryan) 2026
- BSidesSF 2026 - Composing the Response: Building an Incident Pipeline from Scratch (Geet Pradhan) 2026
- BSidesSF 2026 - Conducting the Kill-Chain: Detecting APT... (Krupa Brahmkstri, Sneha Rangari) 2026
- BSidesSF 2026 - Cringe, Corrected: Hot Takes Fixed by the... (Lawrence Cruciana, Amelia Cruciana) 2026
- BSidesSF 2026 - Demystifying File Similarity for Malware Detection (Udbhav Prasad) 2026
- BSidesSF 2026 - Detecting Race Conditions on macOS (Olivia Gallucci) 2026
- BSidesSF 2026 - Detection Allegro: Composing Detection Rules with... (Raphael Ruban, Chen Cao) 2026
- BSidesSF 2026 - Detection at Scale: Abstracting Detection Intent (Gaurav Singh, Dario Amiri) 2026
- BSidesSF 2026 - Elevating First-Time Female Voices on Stage (Poorna Rajaraman, Deepika Gupta) 2026
- BSidesSF 2026 - Follow the data to learn the secret (Dylan Ayrey) 2026
- BSidesSF 2026 - From $10 to $30M: Operating in the Data-Extortion Aftermath (Diego Matos) 2026
- BSidesSF 2026 - From Assistant to Assassin: Weaponizing An OpenClaw Vulnerability to... (Mav Levin) 2026
- BSidesSF 2026 - From Auditions to Opening Night: Selecting Security Tools that... (Saurabh Sharma) 2026
- BSidesSF 2026 - From Noise to Notes: Orchestrating SAST with Developers... (Adrián Puente Z.) 2026
- BSidesSF 2026 - From pocket to Pwn: How we hacked a multinational Corp for $200 with... (Tim Shipp) 2026
- BSidesSF 2026 - Gettings PCAPs from Stingrays for $20 with... (Cooper Quintin, Will Greenberg) 2026
- BSidesSF 2026 - Google Drive Hunter: Building the Tool Google Should’ve Built (Ayman Elsawah) 2026
- BSidesSF 2026 - How the Vietnam War created single sign-on — and how it's evolved... (Connor Peshek) 2026
- BSidesSF 2026 - How to Be a GRC Hero (Without Heroics) (Stas Bojoukha) 2026
- BSidesSF 2026 - How to sell your soul, err, your security program (Jenn Gile) 2026
- BSidesSF 2026 - How We Red-Teamed Our Own AI Agent: Lessons from... (Josiah Peedikayil, HS) 2026
- BSidesSF 2026 - Hunting Malicious IDE Extensions: Building Detection at Scale... (Vinod Tiwari) 2026
- BSidesSF 2026 - Incident Readiness You and Your Leaders Will... (Shachar Hirshberg, Hadar Waldman) 2026
- BSidesSF 2026 - Increasing the Analysis Surface of Large Language Models (Stephen Brennan, Ulrich) 2026
- BSidesSF 2026 - Is Q-Day Worse than Y2K? Strategies for Surviving the Quantum... (Sandip Dholakia) 2026
- BSidesSF 2026 - Kidnapping a Library: How Ransomware Taught the British Library to... (Brian Myers) 2026
- BSidesSF 2026 - Lessons Learned from Building Custom Hacker Hardware (c4m0ufl4g3) 2026
- BSidesSF 2026 - Let's Do the Timewarp Again! A Look Back to Move Forward (Anna Westelius) 2026
- BSidesSF 2026 - Level Up Your Threat Modeling: Turning Security Into a Team... (Stanley Harris) 2026
- BSidesSF 2026 - Making WAF Mainstream: From Static Defenses to... (Roy Weisfeld, Surya Pentakota) 2026
- BSidesSF 2026 - MCPwned: Hacking MCP Servers with One Skeleton Key... (Jonathan Leitschuh) 2026
- BSidesSF 2026 - More Role Models in AppSec: How to Get It Right (Alexandra Charikova) 2026
- BSidesSF 2026 - Not My Vibe: When AI Coding Agents Go Off the Rails (Aonan Guan, Zhengyu Liu) 2026
- BSidesSF 2026 - One Thousand and One AI-Prevented CVEs: Vibe Coding a Whole New... (Brandon Wu) 2026
- BSidesSF 2026 - Opening Remarks (Saturday) (Reed Loden) 2026
- BSidesSF 2026 - Opening Remarks (Sunday) (Reed Loden) 2026
- BSidesSF 2026 - Orchestrating Resilience: Composing a New Score... (Sandhya Narayan, Prachi Jain) 2026
- BSidesSF 2026 - Power Dynamics in Security Leadership: a legato leitmotif... (Sarai Rosenberg) 2026
- BSidesSF 2026 - Practical (and impractical) git commit signing (Matthew Garrett) 2026
- BSidesSF 2026 - Practice Cyber Skills Like a Musician (Bianca Ionescu) 2026
- BSidesSF 2026 - Prompt, Commit, Repeat: Security at Scale When 1,000 Devs... (Balachandra Shanabhag) 2026
- BSidesSF 2026 - Pwning and Defending AI Agent Code Interpreters (Kinnaird McQuade) 2026
- BSidesSF 2026 - RBAC Atlas: Mapping Real-World Kubernetes Permissions and... (Lenin Alevski) 2026
- BSidesSF 2026 - Red Teaming from outside: Identifying and exploiting SaaS systems... (Rojan Rijal) 2026
- BSidesSF 2026 - Rehearsal is Over: Moving GRC Engineering from Theory into... (Branden Rosenlieb) 2026
- BSidesSF 2026 - Reverse Engineering Go Malware: From Manual to AI-Powered Analysis (Asher Davila) 2026
- BSidesSF 2026 - Running an efficient bug bounty program and PSIRT... (Garrett McNamara, Jeff Guerra) 2026
- BSidesSF 2026 - Sandboxes, Seccomp, and Syscalls: Chasing Isolation in Kubernetes (Mark Manning) 2026
- BSidesSF 2026 - Saving Bug Bounties from AI Slop (Anto Joseph) 2026
- BSidesSF 2026 - Securing Space: The Next Frontier for Security Engineers (Anshu Gupta) 2026
- BSidesSF 2026 - Security for AI Agents Using an Ensemble of Fine-tuned... (Lidan Hazout, Bar Kaduri) 2026
- BSidesSF 2026 - Security on a Shoestring: A Low-Budget Security Revival Tour (Jared Casner) 2026
- BSidesSF 2026 - So you think you can airgap? (No.) (Ziyad Edher) 2026
- BSidesSF 2026 - State of (Absolute) AppSec (Panel) 2026
- BSidesSF 2026 - The AppSec Poverty Line: Minimal Viable Security (Tanya Janca) 2026
- BSidesSF 2026 - The Epistemology of Trust (Mike Wilkes) 2026
- BSidesSF 2026 - The Great Credential Caper: How to Perform and... (Christo Roberts, Dan Hollinger) 2026
- BSidesSF 2026 - The great SAST dissonance: how to please every... (Claudio Merloni, Romain Gaucher) 2026
- BSidesSF 2026 - The Heist: Chasing an Advanced Crypto Attacker Across the Multi-cloud (Yotam Meitar) 2026
- BSidesSF 2026 - The Phaaaaaaaaantom of the Salt Typhoon is there, inside i-SOON (Daniel Schwalbe) 2026
- BSidesSF 2026 - The Phantoms of the Fraudpera: An Overview of Anti-Detection Tooling (Bobbie Chen) 2026
- BSidesSF 2026 - The Risky Business of Risk Illiteracy (Sean Juroviesky) 2026
- BSidesSF 2026 - The Room Where It Happens (Identity Compromise Edition):... (Julie Agnes Sparks) 2026
- BSidesSF 2026 - The Trusted Platform Module (Eric Chiang) 2026
- BSidesSF 2026 - Threat Chords: Tuning into Persistent Patterns in... (Karthika, Samhita Vempatti) 2026
- BSidesSF 2026 - We Pwn the Night: Growing & Leading an 31337 security research team (Keith Hoodlet) 2026
- BSidesSF 2026 - Web standard consortiums are a game with Chrome as the monopoly... (Simon Wijckmans) 2026
- BSidesSF 2026 - What a False Alarm Taught Us About Security as a... (Alex Chantavy, Kunaal Sikka) 2026
- BSidesSF 2026 - What happened to the lock icon? (Serena Chen) 2026
- BSidesSF 2026 - When the supply chain hits a sour note (Kennedy Toomey) 2026
- BSidesSF 2026 - Who Watches the NPM Watchers? (Paul McCarty) 2026
- BSidesSF 2026 - You Just Might Find, You Get What You Need: How MS Became My... (Emily Harden) 2026
- BSidesSF 2026 - Your AI Agent Has Production Access: Now What? (Jack) 2026
- BSidesSF 2026 - Your Arch-Nemesis is a Data Scientist: What's the... (Aleatha Parker-Wood) 2026
- BSidesSF 2026 - Your Load Balancer is Your New Perimeter: Attacks & Defenses at Scale (Arjun Sharma) 2026
- BSidesSF 2026 - Your Threat Model Is Lying to You: Why Modeling the Design Isn’t... (Farshad Abasi) 2026
- BSidesSF 2026 - You’re Gonna Be Popular: Why They’re Getting a... (Ruby Murphy, Clea Ostendorf) 2026
- BSidesSF 2023 - Advanced Attack Vectors in Azure Environments (Zur Ulianitzky, Bill Ben Haim) 2023
- BSidesSF 2023 - Backup Plans for Your Backup Plans for Your Backup Plans (Margaret Fero) 2023
- BSidesSF 2023 - Building an Endpoint Security program from scratch (Nishith Shah) 2023
- BSidesSF 2023 - Building Production-Grade End to End Encrypted App... (Ehsan Asdar, Nishil Shah) 2023
- BSidesSF 2023 - Cameras, CACs & Clocks: A Story of Millions of Interrogated and... (John Vecchi) 2023
- BSidesSF 2023 - Career Village - tales from a hiring manager (Sacha Faust) 2023
- BSidesSF 2023 - Catching the Phisherman (Nick Ascoli, Aidan Raney) 2023
- BSidesSF 2023 - Certificate Transparency Logs: Roadmaps to Riches or Ruin? (Nolan Reisbeck) 2023
- BSidesSF 2023 - Closing Ceremony (Reed Loden) 2023
- BSidesSF 2023 - Community Cyber Defense: How to be a Local Cyber Hero (Sarah Powazek) 2023
- BSidesSF 2023 - Container vuln management with (hopefully) minimal... (Alex Chantavy) 2023
- BSidesSF 2023 - Cross Site Scripting 101 (Niru Ragupathy) 2023
- BSidesSF 2023 - Defining a Data Masking Framework at Scale (Sohini Mukherjee, Tim Lam) 2023
- BSidesSF 2023 - Designing consumer account recovery in a 2FA world (Kelley Robinson) 2023
- BSidesSF 2023 - Detection as Code: The Engineering-Focused Future... (Bow, Sparks, Rozhin, Barrett) 2023
- BSidesSF 2023 - Disrupting Malicious Traffic with Egress Proxies (Dean Liu) 2023
- BSidesSF 2023 - FAIR STRIDE - Building Business Relevant Threat Models (Arthur Loris) 2023
- BSidesSF 2023 - First Security Hire: Building a sec... (Loden, Alcock, McBryde, Coolidge, Hanaford) 2023
- BSidesSF 2023 - Gamify security best practices to scalably improve engineering culture 2023
- BSidesSF 2023 - Go Far Together: Building Your Squad (Terry O'Daniel) 2023
- BSidesSF 2023 - Growing Your Skillset with Capture the Flag (David Tomaschik) 2023
- BSidesSF 2023 - Hackers Don't Care About Scope (Ben Sadeghipour) 2023
- BSidesSF 2023 - Hacking the Hiring Process: Insider Tips for your InfoSec Job Search (Zach Strong) 2023
- BSidesSF 2023 - HALT AND CATCH FIRE: Social Engineering CTFs for fun to a job as a... (Alethe Denis) 2023
- BSidesSF 2023 - Hiring and Interviewing as Security Engineers (Arpita Biswas) 2023
- BSidesSF 2023 - How do you trust your open source software? (Naveen Srinivasan, Brian Russell) 2023
- BSidesSF 2023 - How Segment proactively protects customer’s API keys (Sal Olivares) 2023
- BSidesSF 2023 - How to CTF Infra - Beyond the challenges and flags (Max G, Jayesh Singh Chauhan) 2023
- BSidesSF 2023 - HSMs in Plain Envelopes: A Code Signing Story (Alexis Hancock) 2023
- BSidesSF 2023 - Hunting Supply Chain Threats Using Anomaly Detection (Craig Chamberlain) 2023
- BSidesSF 2023 - Keynote: Hacking Policy and Policy Hacking - A Hacker Guide to... (Dr. Amit Elazari) 2023
- BSidesSF 2023 - Keynote: The Expanding Universe of Cyber Threats (Dr. Xena Olsen) 2023
- BSidesSF 2023 - Launch Control - Automating a Security Baseline... (David Levitsky, Olivia Hillman) 2023
- BSidesSF 2023 - Lessons Learned While Building a Privacy Operations Center at... (Shobhit Mehta) 2023
- BSidesSF 2023 - Level Up Your Career (Rami McCarthy, Lea Snyder, Hasnain Lakhani, Kurt Boberg) 2023
- BSidesSF 2023 - Life of a Bug (an insight on the GitHub bounty... (Jeffrey Guerra, Caitlin Buckshaw) 2023
- BSidesSF 2023 - Lost In Space: How to navigate Corporate Security as an Engineer (Maria Mora) 2023
- BSidesSF 2023 - Making of the BSides SF Astronaut Badge (Abhinav SP) 2023
- BSidesSF 2023 - MTV Reboot — my Super Sweet 16-bit malware... (Nika Korchok Wakulich) 2023
- BSidesSF 2023 - New Apps, Good Snacks: Effective Threat Modeling for New Territory (Breanne Boland) 2023
- BSidesSF 2023 - New Face, Who Dis? Recent Adversarial Approaches to Facial Recognition (Mike Kiser) 2023
- BSidesSF 2023 - NLP for security log analysis : Learning to crawl before you run (Arjun Chakraborty) 2023
- BSidesSF 2023 - No Adversaries: Getting Users on Your Side for Tough... (Breanne Boland, Amy Martin) 2023
- BSidesSF 2023 - Opening Remarks - Day 1 (Reed Loden) 2023
- BSidesSF 2023 - Opening Remarks - Day 2 (Reed Loden) 2023
- BSidesSF 2023 - Overwatch: A serverless approach to orchestrating your... (Sanchay Jaipuriyar) 2023
- BSidesSF 2023 - Placeholder for Dayzzz (Rojan Rijal) 2023
- BSidesSF 2023 - Protecting Pinner Passwords (Aalaa Kamal Satti, Yuru Shao) 2023
- BSidesSF 2023 - Sandboxes all the way down - A hitchhiker's guide to platform... (Tom DNetto) 2023
- BSidesSF 2023 - Scalable security: how to win friends and not burn... (Eric Chiang, Brandon Weeks) 2023
- BSidesSF 2023 - Scraping after HiQ Labs v. LinkedIn (Hannah Zhao) 2023
- BSidesSF 2023 - Secret Hunting (Tanya Janca) 2023
- BSidesSF 2023 - Securing the Pipeline: Protecting Self-Hosted GitHub Runners (Adnan Khan) 2023
- BSidesSF 2023 - Security Compliance as Code (Rahat Sethi) 2023
- BSidesSF 2023 - Security Hiring Trends (Erin Barry) 2023
- BSidesSF 2023 - Sleeping With One AI Open: An Introduction to Attacks Against... (Wickens, Janus) 2023
- BSidesSF 2023 - Space and Cyberspace at the White House (Tanya Simms, Lauryn Williams) 2023
- BSidesSF 2023 - Stop Committing Your Secrets - Git Hooks To The Rescue! (Dwayne McDaniel) 2023
- BSidesSF 2023 - Sure, Let Business Users Build Their Own. What Could Go Wrong? (Michael Bargury) 2023
- BSidesSF 2023 - Take The Helm: Guidance For... (Tobener, Sağlam, Dwarakanath, Willett, Ledoux) 2023
- BSidesSF 2023 - The Best Defense is a Great Offense: Leveraging Automated... (Manzer, Parowski) 2023
- BSidesSF 2023 - The Big “P” Problem in Cybersecurity (Stacey Champagne) 2023
- BSidesSF 2023 - The History of Ransomware: From Floppies to Droppers, and Beyond (Eliad Kimhy) 2023
- BSidesSF 2023 - The State of Blockchain Security - 2023 Edition (Peter Kacherginsky) 2023
- BSidesSF 2023 - To Normalized Logs, and Beyond - Building a Threat Detection... (Levitsky, Maloney) 2023
- BSidesSF 2023 - Tracking Meaningful Security Product Metrics (Leif Dreizler) 2023
- BSidesSF 2023 - Using an mTLS Identity Provider to achieve Password-less auth... (Armen Tashjian) 2023
- BSidesSF 2023 - Using machine learning to detect sensitive documents on SharePoint (Wilson Tang) 2023
- BSidesSF 2023 - WebAuthn, Yubikeys, and You: What we wish we knew before... (Alex Toombs) 2023
- BSidesSF 2023 - What Does it Mean to Build a Proactive Security... (Mukund Sarma, Arkadiy Tetelman) 2023
- BSidesSF 2023 - What I learned about security working minimum wage at Hollywood... (Ben Schmerler) 2023
- BSidesSF 2023 - When is a vulnerability not a vulnerability? Overcoming the... (Adam Berman) 2023
- BSidesSF 2023 - Windows 11 At Your Service (Michael Bargury) 2023
- BSidesSF 2023 - You don’t have to patch! (Pedro Fortuna, Jasvir Nagra) 2023
- BSidesSF 2023 - You lost data, unfortunately… Who will knock on your door and why (Gopi Ramamoorthy) 2023
- BSidesSF 2021 - Closing Ceremony (Reed Loden) 2021
- BSidesSF 2021 - CTF Introduction (Ron Bowes) 2021
- BSidesSF 2021 - CTF Writeup: Log 'em All (Ron Bowes) 2021
- BSidesSF 2021 - Offensive Javascript Techniques for Red Teamers (Dylan Ayrey • Christian Frichot) 2021
- BSidesSF 2021 - Opening Remarks (Reed Loden) 2021
- BSidesSF 2021 - Switched On: Behavioral Science, Hyper-vigilance and the Human Impact... (Panel) 2021
- BSidesSF 2019 - A Deep Dive into Go Malware: Using Metadata to Empower the Analyst (Joakim Kennedy) 2019
- BSidesSF 2019 - Abusing WCF Endpoint for RCE and Privilege Escalation (Christopher Anastasio) 2019
- BSidesSF 2019 - All Your Containers Are Belong to Us (James Condon) 2019
- BSidesSF 2019 - Anti-Privacy Anti-Patterns (Sarah Harvey) 2019
- BSidesSF 2019 - Arcades and Audits: What Gaming Can Do for Your Security Posture (Miranda Fullerton) 2019
- BSidesSF 2019 - Ask the EFF (Andrew C • Kurt O • Cooper Q • Sydney L • India M • Alexis H • Alex M) 2019
- BSidesSF 2019 - Attacking Deep Learning-Based NLP Systems (Toshiro Nishimura) 2019
- BSidesSF 2019 - Automating Web Application Bug Hunting (Jerry Gamblin • Jonathan Cran) 2019
- BSidesSF 2019 - Back to the SOCless Future (Ubani Balogun) 2019
- BSidesSF 2019 - BADPDF: Stealing Windows Credentials via PDF Files (Ido Solomon • Adi Ikan) 2019
- BSidesSF 2019 - Beyond AV: Detection-Oriented File Analysis (Josh Liburdi) 2019
- BSidesSF 2019 - Building Identity for an Open Perimeter (Tejas Dharamshi) 2019
- BSidesSF 2019 - Bye-Bye False Positives: Using AI to Improve Detection (Ivan Novikov) 2019
- BSidesSF 2019 - Career Mutation: A Panel on the Evolution to Management in Security 2019
- BSidesSF 2019 - Cats? In My Certificate Transparency Logs? (Scott Behrens • Ian Haken) 2019
- BSidesSF 2019 - Closing Ceremony (Reed Loden) 2019
- BSidesSF 2019 - Collect All the Data; Protect All the Things (Aaron Rosenmund) 2019
- BSidesSF 2019 - Concrete Steps to Create a Security Culture (Arkadiy Tetelman) 2019
- BSidesSF 2019 - Conquer the Enterprise from Inside (Simon Roses Femerling) 2019
- BSidesSF 2019 - Contact Center Authenticaion (Kelley Robinson) 2019
- BSidesSF 2019 - Containers: Your Ally in Improving Security (Connor Gilbert • Connor Gorman) 2019
- BSidesSF 2019 - Deploying Two-Factor Authentication to Millions of Users (Emanuele Cesena) 2019
- BSidesSF 2019 - DevSecOps State of the Union (Clint Gibler) 2019
- BSidesSF 2019 - Do Androids Dream of Electric Fences? (Brandon Weeks) 2019
- BSidesSF 2019 - Do You Even Tech Anymore: Management & Leadership in Security? (Mark Hillick) 2019
- BSidesSF 2019 - Don't Boil the Ocean: Using MITRE ATT&CK to Guide Hunting Activity (John Stoner) 2019
- BSidesSF 2019 - Ethical Hacking: DIY Mobile Security Workstation (For Cheap) (Dale Meredith) 2019
- BSidesSF 2019 - Ferris Bueller's Guide to Abuse Domain Permutations (Rob Ragan • Kelly Albrink) 2019
- BSidesSF 2019 - Friend or Replicant: How Attackers Automate and Disguise Themselves (Anna Westelius) 2019
- BSidesSF 2019 - Fuzzing Malware for Fun & Profit (Maksim Shudrak) 2019
- BSidesSF 2019 - Goldilocks and the Three ATM Attacks (David M. N. Bryan) 2019
- BSidesSF 2019 - Guarding Against Protocol Subversion at Coinbase (Mark Nesbitt) 2019
- BSidesSF 2019 - Hacking with a Heads Up Display (David Scrobonia) 2019
- BSidesSF 2019 - High Performance VM Introspection (Cristinel-Ionel Anichitei • Raul Tosa) 2019
- BSidesSF 2019 - How to Build an Application Security Program (Jerry Gamblin) 2019
- BSidesSF 2019 - How to Fix the Diversity Gap in Cybersecurity (Chloé Messdaghi) 2019
- BSidesSF 2019 - How to Lose a Container in 10 Minutes (Sarah Young) 2019
- BSidesSF 2019 - How to Orchestrate a Cyber Security Incident Tabletop Exercise (Melanie Masterson) 2019
- BSidesSF 2019 - HTTP Security Headers: A Technology History Through Scar Tissue (Benjamin Hering) 2019
- BSidesSF 2019 - Implementing a Kick-Butt Training Program: BLUE TEAM GO! (Ryan Chapman) 2019
- BSidesSF 2019 - Journey to Command Injection: Hacking the Lenovo ix4-300d (Rick Ramgattie) 2019
- BSidesSF 2019 - Lyft Cartography: Automating Security Visibility and Democratization (Sacha Faust) 2019
- BSidesSF 2019 - Making Sense of Unstructured Threat Data (Zainab Danish • Nicolas Kseib) 2019
- BSidesSF 2019 - Navigating Passwordless Authentication with FIDO2 & WebAuthn (Jerrod Chong) 2019
- BSidesSF 2019 - Offensive Javascript Techniques for Red Teamers (Dylan Ayrey • Christian Frichot) 2019
- BSidesSF 2019 - Opening Remarks (Reed Loden) 2019
- BSidesSF 2019 - Opening Remarks (Reed Loden) 2019
- BSidesSF 2019 - Operation PZCHAO (Ivona-Alexandra Chili) 2019
- BSidesSF 2019 - Owning the Smart Home with Logitech Harmony Hub (Joseph Bingham) 2019
- BSidesSF 2019 - Profiling "VIP Accounts" Access Patterns in User-Centric Data Streams 2019
- BSidesSF 2019 - RadRAT: An all-in-one toolkit for complex espionage ops (Ivona-Alexandra Chili) 2019
- BSidesSF 2019 - Securing Online Identities with Simple, Secure, Open Standards (Stina Ehrensvard) 2019
- BSidesSF 2019 - Security Automation Simplified (Moses Schwartz) 2019
- BSidesSF 2019 - Self Care for Security Professionals (Caroline Wong) 2019
- BSidesSF 2019 - Shall We Play a Game? (J Wolfgang Goerlich) 2019
- BSidesSF 2019 - Slack App Security: Securing Your Workspaces From a Bot Uprising (Kelly Ann) 2019
- BSidesSF 2019 - Strangeways, Here We Come (Victor Clark) 2019
- BSidesSF 2019 - Surfing the Motivation Wave to Create Security Behavior Change (Masha Sedova) 2019
- BSidesSF 2019 - The Path to Infosec is Not Always Linear (Rachel Tobac) 2019
- BSidesSF 2019 - The Secure Metamorphosis: Streaming Logs with Kafka and TLS (Tyler Paxton) 2019
- BSidesSF 2019 - Treat the Problems, Not the Symptoms (Igal Gofman • Yaron Shani) 2019
- BSidesSF 2019 - Two-Faces of WASM Security (Pranjal Jumde • Kaizhe Huang) 2019
- BSidesSF 2019 - Vendor Security: Where Our Data Goes We Follow 2019
- BSidesSF 2019 - WHOIS Calling the 80s to Get Their Finger Back (Joakim Kennedy) 2019
- BSidesSF 2019 - You Might Still Need Patches for Denim (Maya Kaczorowski • Dan Lorenc) 2019
- BSidesSF 2018 - A Case Study of MacOS Supply Chain Compromise (Jason Craig • Michael George) 2018
- BSidesSF 2018 - An Open Source Malware Classifier and Dataset (Phil Roth) 2018
- BSidesSF 2018 - Ask the EFF (N Cardozo • A Crocker • G Gebhart • S Lacambra • S Li • K Opsahl) 2018
- BSidesSF 2018 - Blue Team Fundamentals (Benjamin Hering) 2018
- BSidesSF 2018 - Building a Predictive Pipeline to Rapidly Detect Phishing Domains (Wes Connell) 2018
- BSidesSF 2018 - Building Intelligent Automatons with Semantic Reasoning (Anton Goncharov) 2018
- BSidesSF 2018 - Caught My WebApp Cheating on Me! (Pedro Fortuna) 2018
- BSidesSF 2018 - Closing Ceremony (Reed Loden) 2018
- BSidesSF 2018 - Crimeware Chaos: Empirical Analysis of HTTP-Based Botnet C&C Panels (Aditya K Sood) 2018
- BSidesSF 2018 - Data Driven Bug Bounty (Arkadiy Tetelman) 2018
- BSidesSF 2018 - Deconstructing APT28's XAgent for OSX (Tiberius Axinte) 2018
- BSidesSF 2018 - Fighting Secrets In Source Code With TruffleHog (Dylan Ayrey) 2018
- BSidesSF 2018 - From Bounties to Bureaucracy (Brian Gorenc) 2018
- BSidesSF 2018 - Fuzzing Ruby and C Extensions (Claudio Contin) 2018
- BSidesSF 2018 - Hacking the Law: Are Bug Bounties a True Safe Harbor? (Amit Elazari) 2018
- BSidesSF 2018 - Honeypots 2.0: A New ‘Twist’ on Defending Enterprise Networks (Lane Thames) 2018
- BSidesSF 2018 - How to Find if Your Developers are Leaking Secrets? (Ian Lee) 2018
- BSidesSF 2018 - Introduction to Windows Kernel Mode Debugging (Yamin Tian) 2018
- BSidesSF 2018 - Keep it Like a Secret: When Android Apps Contain Private Keys (Will Dormann) 2018
- BSidesSF 2018 - KubeScope for the Extraordinary World of Containers (Tongbo Luo • Zhaoyan Xu) 2018
- BSidesSF 2018 - Lessons Learned Implementing Meaningful Access Controls... (Patrick O'Doherty) 2018
- BSidesSF 2018 - Listen to your Engine (Robby Cochran) 2018
- BSidesSF 2018 - Logging, Monitoring, and Alerting in AWS (The TL;DR) (Jonathon Poling) 2018
- BSidesSF 2018 - Machine Learning: Too Smart for its Own Good (Thomas Phillips) 2018
- BSidesSF 2018 - Managing Secrets in Your Cloud Environment (Evan Johnson • Maya Kaczorowski) 2018
- BSidesSF 2018 - Moving Security from Cost Center to Revenue Generator (Arianna Willett) 2018
- BSidesSF 2018 - Navigating the Vast Ocean of Browser Fingerprints (Russell Thomas) 2018
- BSidesSF 2018 - Netrepser – A JavaScript Targeted Attack (Cristina Vatamanu) 2018
- BSidesSF 2018 - No More XSS: Deploying CSP with nonces and strict-dynamic (Devin Lundberg) 2018
- BSidesSF 2018 - Opening Remarks - Monday (Reed Loden) 2018
- BSidesSF 2018 - Opening Remarks - Sunday (Reed Loden) 2018
- BSidesSF 2018 - Overcoming Obstacles in Operationalizing Security (Rafae Bhatti) 2018
- BSidesSF 2018 - Pensieve: Finding Malicious Artifacts in Container Environments (Yathi Naik) 2018
- BSidesSF 2018 - PostgreSQL Threats and Attacks in the Wild (AJ Bahnken • Forrest Fleming) 2018
- BSidesSF 2018 - Practical Steps for Reducing Exposure and Detecting Compromise (Jim Nitterauer) 2018
- BSidesSF 2018 - Privacy for Safety - OPSEC When the Threat is in the Home (Stella) 2018
- BSidesSF 2018 - Prospecting Ransomware Tech (Vlad Craciun) 2018
- BSidesSF 2018 - Rapid-Fire Stories of Creative Solutions to InfoSec Problems (Katie Ledoux) 2018
- BSidesSF 2018 - Rise of Coinminers (Omri Segev Moyal) 2018
- BSidesSF 2018 - Securing DNSSEC with Ritual and Ceremony (Smiljana Antonijevic) 2018
- BSidesSF 2018 - Simple. Open. Mobile: A Look at the Future of Strong Authentication (Jerrod Chong) 2018
- BSidesSF 2018 - Six Degrees of Infiltration (Sacha Faust) 2018
- BSidesSF 2018 - So You Think You Can Patch (J Banghart • A Friedman • K Landfield • W Nather) 2018
- BSidesSF 2018 - Starting a Security Program: Thrills and Spills (Poornaprajna Udupi) 2018
- BSidesSF 2018 - Supply Chain Attack Through CCleaner (Itai Tevet) 2018
- BSidesSF 2018 - Tales of Red Teaming (Aladdin Mubaied • Rahul Nair) 2018
- BSidesSF 2018 - The Bucket List: Experiences Operating S3 Honeypots (Cameron Ero) 2018
- BSidesSF 2018 - The IoT Hacker's Toolkit (David Tomaschik) 2018
- BSidesSF 2018 - The Memory of a Meltdown (Shane Cota • Chris Magistrado) 2018
- BSidesSF 2018 - The SecDevOpronomicon (Clint Gibler) 2018
- BSidesSF 2018 - Unraveling the Threat of Chrome Based Malware (Spencer Walden • Justin Warner) 2018
- BSidesSF 2018 - Using Math to Speed Up Security Assessments of Windows Executables (Cole Thompson) 2018
- BSidesSF 2018 - What We Can Learn from Google’s Fight with Phishing (Neal Mueller) 2018
- BSidesSF 2016 - A year in the wild: fighting malware at the corporate level (Kuba Sendor) 2016
- BSidesSF 2016 - Abusing Security Products to Bypass Windows Protections (Tomer Bitton, Udi Yavo) 2016
- BSidesSF 2016 - Access Control in 2016 - deep dive (Dr. Ulrich Lang) 2016
- BSidesSF 2016 - Adv techniques for real time detection of polymorphic malware (Ajit Thyagarajan) 2016
- BSidesSF 2016 - APT Reports and OPSEC Evolution (Gadi Evron) 2016
- BSidesSF 2016 - Ask the EFF (Kurt Opsahl Eva Galperin Andrew Crocker Shahid Buttar Cooper Quintin) 2016
- BSidesSF 2016 - Case Study in Using Bad Malware Design Against Attackers (J Bambenek, H Modi) 2016
- BSidesSF 2016 - Developing a Rugged DevOps Approach to Cloud Security (Tim Prendergast) 2016
- BSidesSF 2016 - Digital Intel Gathering: OSINT for Blue/Red Teams (Ethan Dodge, Brian Warehime) 2016
- BSidesSF 2016 - Elliptic Curve Cryptography for those who are afraid of math (Martijn Grooten) 2016
- BSidesSF 2016 - Employee Hijacking: Building a hacktober awareness prgrm (Ryan B, Ninad B, Dylan H) 2016
- BSidesSF 2016 - Everything Is Awful (And You're Not Helping) (Jan Schaumann) 2016
- BSidesSF 2016 - Fraud Detection & Real-time Trust Decisions (James Addison) 2016
- BSidesSF 2016 - Fuzz Smarter, Not Harder (An afl-fuzz Primer) (Craig Young) 2016
- BSidesSF 2016 - Guest to root - How to Hack Your Own Career Path and Stand Out (Javvad Malik) 2016
- BSidesSF 2016 - In the crosshairs: the trend towards targeted attacks (Lance Cottrell) 2016
- BSidesSF 2016 - IoT on Easy Mode (Reversing Embedded Devices) (Elvis Collado) 2016
- BSidesSF 2016 - Keynote: A Declaration of the Independence of Cyberspace (John Perry Barlow) 2016
- BSidesSF 2016 - Mobile App Corporate Espionage (Michael Raggo) 2016
- BSidesSF 2016 - Planning Effective Red Team Exercises (Sean T. Malone) 2016
- BSidesSF 2016 - Scan Pwn Next! – exploiting service accounts in Windows (Andrey Dulkin, Matan Hart) 2016
- BSidesSF 2016 - Securing the Distributed Workforce (William Bengtson) 2016
- BSidesSF 2016 - Sharing is Caring: Understanding & measuring TI Sharing Effectiveness (Alex Pinto) 2016
- BSidesSF 2016 - Sweet Security: Deploying a Defensive Raspberry Pi (Travis Smith) 2016
- BSidesSF 2016 - The Art of the Jedi Mind Trick (Jeff Man) 2016
- BSidesSF 2016 - The Ransomware Threat: Tracking the Digital Footprints (Kevin Bottomley) 2016
- BSidesSF 2016 - The Tales of a Bug Bounty Hunter (Arne Swinnen) 2016
- BSidesSF 2016 - Understanding Human Behavior to Improve InfoSec (Alexandre Sieira Matthew Hathaway) 2016
- BSidesSF 2016 - Using Behavior to Protect Cloud Servers (Anirban Banerjee) 2016
- BSidesSF 2016 - Who's Breaking into Your Garden? iOS & OS X Malware You May (Not) Know (Claud Xiao) 2016
- BSidesSF 2016 - Why Can't We Have Nice Things? Conflict Resolution in InfoSec (Rachael Lininger) 2016
- BSidesSF 2016 - Why it’s all snake oil – and that may be ok (Pablo Breuer) 2016
- BSidesSF 2015 - *Blink*: The Network Perimeter is Gone (Rick Farina [Zero_Chaos]) 2015
- BSidesSF 2015 - Ask the EFF (Nate Cardozo, Andrew Crocker, Kurt Opsahl) 2015
- BSidesSF 2015 - Collective Action Problems in Cybersecurity (Allan Friedman) 2015
- BSidesSF 2015 - Corporate Governance For Fun and (Non)Profit (Christie Dudley) 2015
- BSidesSF 2015 - Critical Infrastructure: The Cloud loves me, The Cloud loves me not. (Bryan Owen) 2015
- BSidesSF 2015 - DNS Spikes, Strikes, and The Like (Thomas Mathew) 2015
- BSidesSF 2015 - F*ck These Guys: Practical Counter Surveillance (Lisa Lorenzin) 2015
- BSidesSF 2015 - Federating AWS CLI (Ayman Elsawah, Paul Moreno) 2015
- BSidesSF 2015 - Getting started...help me help you (David Trollman) 2015
- BSidesSF 2015 - GitReview - All Git Commits are Reviewed (Jon Debonis) 2015
- BSidesSF 2015 - Ground Zero Fin Srvcs: Latest Targeted Attacks ... (Brian Contos, Jonathan Curtis) 2015
- BSidesSF 2015 - Hacker or criminal? Repairing the rep of the infosec community (Melanie Ensign) 2015
- BSidesSF 2015 - HIPAA 2015: Wrath of the Audits (W. Hudson Harris) 2015
- BSidesSF 2015 - How SecOps Can Convince DevOps To Believe In The Bogeyman (Leif Dreizler) 2015
- BSidesSF 2015 - How to Lie with Statistics, Information Security Edition (Tony Martin-Vegue) 2015
- BSidesSF 2015 - Human Hunting (Sean Gillespie) 2015
- BSidesSF 2015 - Intrusion Detection in the Clouds (Josh Pyorre) 2015
- BSidesSF 2015 - Lessons Learned from Building & Running MHN, a Crowd-sourced Honeynet (Jason Trost) 2015
- BSidesSF 2015 - Medical Device Security - From Detection To Compromise (Adam Brand, Scott Erven) 2015
- BSidesSF 2015 - Opening Remarks 2015
- BSidesSF 2015 - OSXCollector: Forensic Collection and Automated Analysis for OS X (Ivan Leichtling) 2015
- BSidesSF 2015 - Phighting Phishers Phake Phronts (Kevin Bottomley) 2015
- BSidesSF 2015 - Securing the Hastily Formed Network: Infosec for Disaster ... (Rakesh Bharania) 2015
- BSidesSF 2015 - Stick a Pin in Cert Pinning: How to Inspect Mobile Traffic ... (Gopal Jayaraman) 2015
- BSidesSF 2015 - Student Surveillance: How Hackers Can Help Protect Student Privacy (Jessy Irwin) 2015
- BSidesSF 2015 - When Doing the Right Thing Goes Wrong - Impact of Certificates ... (Robert Lucero) 2015
- BSidesSF 2015 - Your Users Passwords Are Already Stolen (Lucas Zaichkowsky) 2015
- BSidesSF 2013 - Keynote: Step Up... Or Step Out: Leveling Up (Joshua Corman) 2013
- BSidesSF 2012 - 2012: The End of Security Stupidity 2012
- BSidesSF 2012 - Across the Desk: Different Perspectives on InfoSec Hiring and Interviewing 2012
- BSidesSF 2012 - Ask the EFF 2012
- BSidesSF 2012 - Automating Security for the Cloud: Why we all need to care… (Rand Wacker) 2012
- BSidesSF 2012 - Beyond Passwords (Alexy Fredoseev) 2012
- BSidesSF 2012 - Cracking the Encrypted C&C Protocol of a New p2p Botnet (Kevin McNamee) 2012
- BSidesSF 2012 - Dynamic Web Scanning at Massive Scale (Erik Peterson) 2012
- BSidesSF 2012 - Fundamental Flaws in Security Thinking (Martin McKeay) 2012
- BSidesSF 2012 - Hacking the Bank: Figuring out what the cost of hacks may be (Gillis Jones) 2012
- BSidesSF 2012 - I can read your mind... (Will Tarkington) 2012
- BSidesSF 2012 - Identity in the Open Web (Yvan Boily) 2012
- BSidesSF 2012 - Mapping the Penetration Tester's Mind: 0 to Root in 60 min (Kizz MyAnthia) 2012
- BSidesSF 2012 - Metrics That Don’t Suck (Dr. Mike Lloyd) 2012
- BSidesSF 2012 - Money$ec Evolved (Jared Pfost and Brian Keefer) 2012
- BSidesSF 2012 - SCADA Security: Why is it so hard? (Amol Sarwate) 2012
- BSidesSF 2012 - Serious Threat or FUD Machine? The Mobile Security Debate (Dan Hoffman) 2012
- BSidesSF 2012 - So you want to be the CSO... (Daniel Blander) 2012
- BSidesSF 2012 - We are Handling Security the Wrong Way (Brett Hardin) 2012
- BSidesSF 2012 - Yet Another Type of Application Layer Denial of Service Attack... (Sergey Shekyan) 2012
- BSidesSF 2012 - Your IR Team: More than Firemen and Maids (Wade Baker and Christopher Porter) 2012