BSidesSF 2022

Attending this event?

BSidesSF 2022

#1

Exposed secrets - How public git repositories and docker images expose millions of secrets like API keys and security certificates every year

#2

Keynote: We Need More Mediocre Security Engineers

#3

Opening Remarks

#4

Let's have fun and fix security awareness training!

#5

Closing Ceremony

#6

Burnout: The Weakness to your Security Plan

#7

The elusive promise of frictionless authentication

#8

Emerging Best Practices in Software Supply Chain Security: What We Can Learn from Google, the White House, OWASP, and Gartner

#9

Keynote

#10

Opening Remarks

#11

Detection-as-code: Why it works and where to start

#12

Lunch

#13

Breakfast

#14

Cryptography and Blockchain Security

#15

Lunch

#16

Avoiding insidious points of compromise in infrastructure access systems

#17

Happy Hour

#18

Party

#19

Practical Threat Hunting With Machine Learning

#20

Ooga Booga - Avoiding Reinvention of the Wheel (Useful Security Tools and Lessons to Know)

#21

Breakfast

#22

The power of guardrails: How to slash your risk of XSS in half

#23

Embracing Risk Responsibly: Moving beyond inflexible SLAs and exception hell by treating security vulnerabilities and risk like actual debt

#24

Read the Fantastic Manual: Writing Security Docs People Will Actually Read

#25

Attacking and Defending Infrastructure with Terraform: How we got admin across cloud environments

#26

An Unlikely Friendship: Why Security Engineers and Product Managers Should Be Working Together

#27

Got popcorn? What’s on the Vuln Channel tonight?

#28

Redefining Threat Modeling: Security team goes on vacation

#29

Don't turn your back on Ransomware!

#30

How to Fake Friends and Find People: A Build-A-Buddy case study

#31

Biohacker: The Invisible Threat

#32

Finding Bugs and Scaling Your Security Program with Semgrep

#33

Threat hunting: Using MITRE ATT&CK against Carbanak malware

#34

So You Think You Can Secure Your Cloud : Red Team Engagements in GCP

#35

Everyone Can Play! Building Great CTFs To Teach Non-Security Folks

#36

Crypto & Privacy Village

#37

WireGuard from the ground up

#38

Sponsor Raffle

#39

Hacker TikTok: Community, Creativity, and Controversy

#40

Registration

#41

Introduction to Cryptographic Attacks

#42

Go With The (Work)flow

#43

Buying Security: A Client's Guide

#44

Achieving the Web Isolation Nirvana - How far along are we?

#45

Red Teaming macOS Environments with Hermes the Swift Messenger

#46

Achieving HITRUST on a Budget

#47

Hook, Line and Sinker - Pillaging API Webhooks

#48

Gray Cover: The dangers of cloud shells

#49

XSS mitigation: the state of the art

#50

Coffee