BSidesSF 2022 has ended

Create Your Own Event

BSidesSF 2022

arrow_back View All Dates

9:00am PDT

Breakfast Participation HallHackerOne • Instacart • Intel • Teleport Coffee Participation HallSweetpea • Tailscale Capture the Flag EmbarcaderoGoogle Info Desk LobbyCribl Prayer & Mother's Room Lobby Registration AMC Mezzanine Sponsors Participation Hall Crypto & Privacy Village Participation HallMaterial Security Hardware Village Participation HallMaterial Security IoT Village Participation HallMaterial Security Lockpick Village Participation HallMaterial Security Bar and Chill Out BarErmetic Massage LobbyCode42 • Sprinkles T-Shirt Sales Coat Check Coat Check Coat CheckAruba Threat Labs

10:00am PDT

Opening Remarks EmbarcaderoReed Loden Simulcast of the Keynote and Opening Remarks Theater 14

10:10am PDT

Keynote: Building sustainable security programs EmbarcaderoAstha Singhal

11:00am PDT

Speed Mentoring Village AMC LoungeMaterial Security

11:05am PDT

Exposed secrets - How public git repositories and docker images expose millions of secrets like API keys and security certificates every year Theater 14Mackenzie Jackson

11:10am PDT

Achieving HITRUST on a Budget Theater 15Shobhit Mehta The CISO Panel Discussion EmbarcaderoTom Alcock • Caleb Sima • Fermin Serna • Jessica Ferguson Threat hunting: Using MITRE ATT&CK against Carbanak malware Theater 11Amol Sarwate

11:35am PDT

The power of guardrails: How to slash your risk of XSS in half Theater 14Colleen Dai • Grayson Hardaway

12:00pm PDT

Lunch Participation HallHackerOne • Instacart • Intel • Teleport

12:10pm PDT

CTF Lunch talk 2 - Crypto and XSS for fun TBABrandon Enright • Niru Ragupathy

12:30pm PDT

Sponsor Raffle Participation Hall

1:30pm PDT

Don't turn your back on Ransomware! Theater 15Erik Heskes Metabadger: Automating IMDS Protection at Scale in AWS Theater 11Ashish Patel Rise of the Vermilion: Cross-Platform Cobalt Strike Beacon Targeting Linux and Windows Theater 14Avigayil Mechtinger • Ryan Robinson Hook, Line and Sinker - Pillaging API Webhooks EmbarcaderoAbhay Bhargav

2:00pm PDT

Got popcorn? What’s on the Vuln Channel tonight? Theater 14Rob Jerdonek • Lily Chau Securing Internal Applications @ Loom Theater 15Narayan Gowraj Practical Threat Hunting With Machine Learning Theater 11Omid Mirzaei • Craig Chamberlain

2:30pm PDT

Wins and Learns from the Integration of reCAPTCHA at Pinterest Theater 15Yuru Shao Hacker TikTok: Community, Creativity, and Controversy Theater 14Kyle Tobener • MakeItHackin • shenetworks • Kylie Robison How to Fake Friends and Find People: A Build-A-Buddy case study EmbarcaderoDahvid Schloss • Alex Dodd

3:00pm PDT

Burnout: The Weakness to your Security Plan Theater 15Chloé Messdaghi Log in Your Own Eye - Exploiting a Stealthy C2 Channel in Azure Logging Infrastructure Theater 11Dmitriy Beryoza

3:30pm PDT

Attacking and Defending Infrastructure with Terraform: How we got admin across cloud environments Theater 14Mike Ruth • Francisco Oca Ooga Booga - Avoiding Reinvention of the Wheel (Useful Security Tools and Lessons to Know) EmbarcaderoCarla Sun So You Think You Can Secure Your Cloud : Red Team Engagements in GCP Theater 11Brad Richardson • Madhav Bhatt

4:30pm PDT

Biohacker: The Invisible Threat EmbarcaderoLen Noe JavaScript Obfuscation - It’s All About the P-a-c-k-e-r-s Theater 14Or Katz XSS mitigation: the state of the art Theater 15Jean-Baptiste Aviat • Vladimir de Turckheim

5:30pm PDT

Closing Ceremony EmbarcaderoReed Loden