BSidesSF 2023 has ended

Create Your Own Event

BSidesSF 2023

9:00am PDT

Breakfast Participation Hall Capture the Flag Twin PeaksSocket Coffee Participation HallOpal • Sprinkles • Tailscale Sponsors Participation Hall Badge Village Participation HallGitGuardian • Tessian Bug Bounty Village Participation HallGitGuardian • Tessian Career Village Participation HallGitGuardian • Tessian Cloud Village Participation HallGitGuardian • Tessian Crypto & Privacy Village Participation HallGitGuardian • Tessian Day of Shecurity Participation HallGitGuardian • Tessian Electronic Frontier Foundation (EFF) Participation HallGitGuardian • Tessian IoT Village Participation HallGitGuardian • Tessian Lockpick Village Participation HallGitGuardian • Tessian Bar and Chill Out Participation HallConveyor Lounge City View TerraceSlack Registration Mezzanine (AMC) Info Desk Lobby Prayer & Mother's Room Lobby Coat Check Coat CheckNetflix

10:00am PDT

Opening Remarks AMC Theatre 13Reed Loden Finding Bugs and Scaling Your Security Program with Semgrep AMC Theatre 10Lewis Ardern • Brandon Wu • Enno Liu

10:10am PDT

The Expanding Universe of Cyber Threats AMC Theatre 13Dr. Xena Olsen

11:00am PDT

T-Shirt Sales Coat Check

11:05am PDT

No Adversaries: Getting Users on Your Side for Tough Transformations AMC Theatre 15Breanne Boland • Amy Martin

11:10am PDT

Stop Committing Your Secrets - Git Hooks To The Rescue! AMC Theatre 14Dwayne McDaniel Making of the BSides SF Astronaut Badge Après Village (Embarcadero)Abhinav SP Building Production-Grade End to End Encrypted Applications AMC Theatre 12Ehsan Asdar • Nishil Shah Level Up Your Career: A Panel on Staff+ Engineering AMC Theatre 13Rami McCarthy • Lea Snyder • Hasnain Lakhani • Kurt Boberg

11:30am PDT

Community Cyber Defense: How to be a Local Cyber Hero AMC Theatre 14Sarah Powazek

11:35am PDT

Gamify security best practices to scalably improve engineering culture AMC Theatre 15David Trejo

11:40am PDT

Growing Your Skillset with Capture the Flag Après Village (Embarcadero)David Tomaschik

12:00pm PDT

Lunch Participation Hall

12:30pm PDT

Sponsor Raffle Participation Hall Android App Hacking - Hacking for Good AMC Theatre 10Maria Uretsky • Kavia Venkatesh • Sajjad Arshad • Olivier Tuchon

1:30pm PDT

Cross Site Scripting 101 Après Village (Embarcadero)Niru Ragupathy What Does it Mean to Build a Proactive Security Culture in an Organization AMC Theatre 15Mukund Sarma • Arkadiy Tetelman Catching the Phisherman AMC Theatre 13Nick Ascoli • Aidan Raney Hunting Supply Chain Threats Using Anomaly Detection AMC Theatre 14Craig Chamberlain Lessons Learned While Building a Privacy Operations Center at Headspace Health AMC Theatre 12Shobhit Mehta

2:00pm PDT

Tracking Meaningful Security Product Metrics AMC Theatre 15Leif Dreizler HSMs in Plain Envelopes: A Code Signing Story Après Village (Embarcadero)Alexis Hancock

2:30pm PDT

Defining a Data Masking Framework at Scale AMC Theatre 12Sohini Mukherjee • Tim Lam New Apps, Good Snacks: Effective Threat Modeling for New Territory AMC Theatre 15Breanne Boland New Face, Who Dis? Recent Adversarial Approaches to Facial Recognition AMC Theatre 13Mike Kiser Certificate Transparency Logs: Roadmaps to Riches or Ruin? AMC Theatre 14Nolan Reisbeck

3:00pm PDT

Career Village - tales from a hiring manager Après Village (Embarcadero)Sacha Faust Life of a Bug (an insight on the GitHub bounty program) AMC Theatre 15Jeffrey Guerra • Caitlin Buckshaw NLP for security log analysis : Learning to crawl before you run AMC Theatre 12Arjun Chakraborty The History of Ransomware: From Floppies to Droppers, and Beyond AMC Theatre 13Eliad Kimhy

3:30pm PDT

Hackers Don't Care About Scope Après Village (Embarcadero)Ben Sadeghipour Overwatch: A serverless approach to orchestrating your security automation AMC Theatre 15Sanchay Jaipuriyar FAIR STRIDE - Building Business Relevant Threat Models AMC Theatre 12Arthur Loris You lost data, unfortunately… Who will knock on your door and why? AMC Theatre 14Gopi Ramamoorthy Detection as Code: The Engineering-Focused Future of Detection and Response AMC Theatre 13Jackie Bow • Julie Agnes Sparks • Jessica Rozhin • Louis Barrett

4:00pm PDT

Hiring and Interviewing as Security Engineers Après Village (Embarcadero)Arpita Biswas When is a vulnerability not a vulnerability? Overcoming the inundation of noisy supply chain security alerts AMC Theatre 15Adam Berman

4:30pm PDT

Container vuln management with (hopefully) minimal burnout AMC Theatre 15Alex Chantavy Red Team Tales - 7 Years of Physical Penetration Testing AMC Theatre 13Justin Wynn Sleeping With One AI Open: An Introduction to Attacks Against Artificial Intelligence and Machine Learning AMC Theatre 12Eoin Wickens • Marta Janus To Normalized Logs, and Beyond - Building a Threat Detection Platform from Scratch AMC Theatre 14David Levitsky • Brian Maloney

5:00pm PDT

Scalable security: how to win friends and not burn out everyone AMC Theatre 15Eric Chiang • Brandon Weeks

5:30pm PDT

Happy Hour Participation HallOry

6:30pm PDT

Party Participation HallLacework

9:00am PDT

Breakfast Participation Hall Coffee Participation HallOpal • Sprinkles • Tailscale Capture the Flag Twin PeaksSocket Info Desk Lobby Prayer & Mother's Room Lobby Registration Mezzanine (AMC) Sponsors Participation Hall Badge Village Participation HallGitGuardian • Tessian Bug Bounty Village Participation HallGitGuardian • Tessian Career Village Participation HallGitGuardian • Tessian Cloud Village Participation HallGitGuardian • Tessian Crypto & Privacy Village Participation HallGitGuardian • Tessian Day of Shecurity Participation HallGitGuardian • Tessian Electronic Frontier Foundation (EFF) Participation HallGitGuardian • Tessian IoT Village Participation HallGitGuardian • Tessian Lockpick Village Participation HallGitGuardian • Tessian Bar and Chill Out Participation Hall Lounge City View TerraceSlack T-Shirt Sales Coat Check Coat Check Coat CheckNetflix

10:00am PDT

Opening Remarks AMC Theatre 13Reed Loden Outpwn: Gamified, Card-Based Cyber Warfare AMC Theatre 10Tony Loehr • Emery Hollingsworth

10:10am PDT

Hacking Policy and Policy Hacking - A Hacker Guide to the Universe of Cyber Policy AMC Theatre 13Dr. Amit Elazari

11:05am PDT

HALT AND CATCH FIRE: Social Engineering CTFs for fun to a job as a Professional Red Team Social Engineer AMC Theatre 15Alethe Denis Protecting Pinner Passwords AMC Theatre 14Aalaa Kamal Satti • Yuru Shao You don’t have to patch! AMC Theatre 12Pedro Fortuna • Jasvir Nagra

11:10am PDT

What I learned about security working minimum wage at Hollywood Video Après Village (Embarcadero)Ben Schmerler Take The Helm: Guidance For Prospective Future CISOs AMC Theatre 13Kyle Tobener • Emre Sağlam • Divya Dwarakanath • Arianna Willett • Katie Ledoux

11:35am PDT

Designing consumer account recovery in a 2FA world AMC Theatre 14Kelley Robinson Security Compliance as Code AMC Theatre 12Rahat Sethi Windows 11 At Your Service AMC Theatre 15Michael Bargury

11:40am PDT

Cameras, CACs & Clocks: A Story of Millions of Interrogated and Hacked xIoT Devices Après Village (Embarcadero)John Vecchi

12:00pm PDT

Lunch Participation Hall

12:30pm PDT

Sponsor Raffle Participation Hall Space Intruders: A Practical Guide to Building (& Maintaining) Your Cyber Threat Profile AMC Theatre 10Scott Small

1:30pm PDT

Scraping after HiQ Labs v. LinkedIn Après Village (Embarcadero)Hannah Zhao (Canceled) Malware Hunting - Discovering techniques in PDF malicious AMC Theatre 15 Securing the Pipeline: Protecting Self-Hosted GitHub Runners AMC Theatre 12Adnan Khan Sure, Let Business Users Build Their Own. What Could Go Wrong? AMC Theatre 14Michael Bargury The State of Blockchain Security - 2023 Edition AMC Theatre 13Peter Kacherginsky

2:00pm PDT

Hacking the Hiring Process: Insider Tips for your InfoSec Job Search Après Village (Embarcadero)Zach Strong

2:30pm PDT

Security Hiring Trends Après Village (Embarcadero)Erin Barry How Segment proactively protects customer’s API keys AMC Theatre 14Sal Olivares Advanced Attack Vectors in Azure Environments AMC Theatre 12Zur Ulianitzky • Bill Ben Haim Space and Cyberspace at the White House AMC Theatre 15Tanya Simms • Lauryn Williams The Best Defense is a Great Offense: Leveraging Automated OffSec to Build Proactive C2 Detections AMC Theatre 13Sam Manzer • Mike Parowski

3:00pm PDT

The Big “P” Problem in Cybersecurity Après Village (Embarcadero)Stacey Champagne Backup Plans for Your Backup Plans for Your Backup Plans AMC Theatre 14Margaret Fero IR Workshop AMC Theatre 10Nathan Case

3:30pm PDT

Go Far Together: Building Your Squad Après Village (Embarcadero)Terry O'Daniel Lost In Space: How to navigate Corporate Security as an Engineer AMC Theatre 14Maria Mora Using machine learning to detect sensitive documents on SharePoint AMC Theatre 12Wilson Tang Placeholder for Dayzzz AMC Theatre 15Rojan Rijal First Security Hire: Building a security roadmap and team from scratch AMC Theatre 13Reed Loden • Tom Alcock • Mike McBryde • Coleen Coolidge • Kevin Hanaford

4:00pm PDT

Building an Endpoint Security program from scratch AMC Theatre 14Nishith Shah Launch Control - Automating a Security Baseline in the Cloud at Scale AMC Theatre 12David Levitsky • Olivia Hillman How to CTF Infra - Beyond the challenges and flags Après Village (Embarcadero)Max G

4:30pm PDT

Disrupting Malicious Traffic with Egress Proxies AMC Theatre 12Dean Liu Secret Hunting AMC Theatre 13Tanya Janca Using an mTLS Identity Provider to achieve Password-less auth, Device Health Attestation, and low Earth orbit AMC Theatre 14Armen Tashjian MTV Reboot — my Super Sweet 16-bit malware ~*MS-DOS Edition*~ [TSR Remix] AMC Theatre 15Nika Korchok Wakulich

5:00pm PDT

How do you trust your open source software? AMC Theatre 14Naveen Srinivasan • Brian Russell Sandboxes all the way down - A hitchhiker's guide to platform containment AMC Theatre 12Tom DNetto WebAuthn, Yubikeys, and You: What we wish we knew before rolling out WebAuthn for internal use AMC Theatre 13Alex Toombs

5:30pm PDT

Closing Ceremony AMC Theatre 13Reed Loden