BSidesSF 2022 has ended

Create Your Own Event

BSidesSF 2022

10:00am PDT

Opening Remarks EmbarcaderoReed Loden Simulcast of the Keynote and Opening Remarks Theater 14

10:10am PDT

Keynote: We Need More Mediocre Security Engineers EmbarcaderoJackie Bow

11:05am PDT

WireGuard from the ground up Theater 14Maya Kaczorowski • David Crawshaw

11:10am PDT

An Unlikely Friendship: Why Security Engineers and Product Managers Should Be Working Together EmbarcaderoLeif Dreizler • Rachel Landers

11:35am PDT

Detection-as-code: Why it works and where to start Theater 14Kyle Bailey

1:30pm PDT

Go With The (Work)flow Theater 14Ryan Robinson • Nicole Fishbein Embracing Risk Responsibly: Moving beyond inflexible SLAs and exception hell by treating security vulnerabilities and risk like actual debt EmbarcaderoEric Ellett

2:00pm PDT

Read the Fantastic Manual: Writing Security Docs People Will Actually Read Theater 14Breanne Boland

2:30pm PDT

Buying Security: A Client's Guide EmbarcaderoRami McCarthy

3:30pm PDT

Emerging Best Practices in Software Supply Chain Security: What We Can Learn from Google, the White House, OWASP, and Gartner Theater 14Tony Loehr Redefining Threat Modeling: Security team goes on vacation EmbarcaderoJeevan Singh

4:00pm PDT

Avoiding insidious points of compromise in infrastructure access systems Theater 14Dr. Sharon Goldberg

4:30pm PDT

Achieving the Web Isolation Nirvana - How far along are we? EmbarcaderoPedro Fortuna • Jasvir Nagra Red Teaming macOS Environments with Hermes the Swift Messenger Theater 14Justin Bui

10:00am PDT

Opening Remarks EmbarcaderoReed Loden Simulcast of the Keynote and Opening Remarks Theater 14

10:10am PDT

Keynote: Building sustainable security programs EmbarcaderoAstha Singhal

11:05am PDT

Exposed secrets - How public git repositories and docker images expose millions of secrets like API keys and security certificates every year Theater 14Mackenzie Jackson

11:10am PDT

Achieving HITRUST on a Budget Theater 15Shobhit Mehta The CISO Panel Discussion EmbarcaderoTom Alcock • Caleb Sima • Fermin Serna • Jessica Ferguson Threat hunting: Using MITRE ATT&CK against Carbanak malware Theater 11Amol Sarwate

11:35am PDT

The power of guardrails: How to slash your risk of XSS in half Theater 14Colleen Dai • Grayson Hardaway

1:30pm PDT

Don't turn your back on Ransomware! Theater 15Erik Heskes Metabadger: Automating IMDS Protection at Scale in AWS Theater 11Ashish Patel Rise of the Vermilion: Cross-Platform Cobalt Strike Beacon Targeting Linux and Windows Theater 14Avigayil Mechtinger • Ryan Robinson Hook, Line and Sinker - Pillaging API Webhooks EmbarcaderoAbhay Bhargav

2:00pm PDT

Got popcorn? What’s on the Vuln Channel tonight? Theater 14Rob Jerdonek • Lily Chau Securing Internal Applications @ Loom Theater 15Narayan Gowraj Practical Threat Hunting With Machine Learning Theater 11Omid Mirzaei • Craig Chamberlain

2:30pm PDT

Wins and Learns from the Integration of reCAPTCHA at Pinterest Theater 15Yuru Shao Hacker TikTok: Community, Creativity, and Controversy Theater 14Kyle Tobener • MakeItHackin • Serena DiPenti (shenetworks) • Kylie Robison How to Fake Friends and Find People: A Build-A-Buddy case study EmbarcaderoDahvid Schloss • Alex Dodd

3:00pm PDT

Burnout: The Weakness to your Security Plan Theater 15Chloé Messdaghi Log in Your Own Eye - Exploiting a Stealthy C2 Channel in Azure Logging Infrastructure Theater 11Dmitriy Beryoza

3:30pm PDT

Attacking and Defending Infrastructure with Terraform: How we got admin across cloud environments Theater 14Mike Ruth • Francisco Oca Ooga Booga - Avoiding Reinvention of the Wheel (Useful Security Tools and Lessons to Know) EmbarcaderoCarla Sun So You Think You Can Secure Your Cloud : Red Team Engagements in GCP Theater 11Brad Richardson • Madhav Bhatt

4:30pm PDT

Biohacker: The Invisible Threat EmbarcaderoLen Noe JavaScript Obfuscation - It’s All About the P-a-c-k-e-r-s Theater 14Or Katz XSS mitigation: the state of the art Theater 15Jean-Baptiste Aviat • Vladimir de Turckheim