BSidesSF 2023

Attending this event?

BSidesSF 2023

9:00am PDT

Breakfast Participation Hall Capture the Flag Twin Peaks Coffee Participation HallOpal • Sprinkles • Tailscale Sponsors Participation Hall Badge Village Participation HallGitGuardian • Tessian Bug Bounty Village Participation HallGitGuardian • Tessian Careers Village Participation HallGitGuardian • Tessian Cloud Village Participation Hall Crypto & Privacy Village Participation HallGitGuardian • Tessian Day of Shecurity Participation HallGitGuardian • Tessian Electronic Frontier Foundation (EFF) Participation HallGitGuardian • Tessian IoT Village Participation HallGitGuardian • Tessian Lockpick Village Participation HallGitGuardian • Tessian Bar and Chill Out Participation Hall Registration Mezzanine AMC Info Desk Lobby Prayer & Mother's Room Lobby Coat Check Coat CheckNetflix

10:00am PDT

Opening Remarks AMC Dolby (Theatre 13)Reed Loden Finding Bugs and Scaling Your Security Program with Semgrep AMC Workshops (Theatre 10)Lewis Ardern

10:10am PDT

The Expanding Universe of Cyber Threats AMC Dolby (Theatre 13)Dr. Xena Olsen

11:00am PDT

T-Shirt Sales Coat Check

11:05am PDT

No Adversaries: Getting Users on Your Side for Tough Transformations AMC Theatre 15Breanne Boland • Amy Martin

11:10am PDT

Stop Committing Your Secrets - Git Hooks To The Rescue! AMC Theatre 14Dwayne McDaniel Making of the BSides SF Hardware Village Badge Après Village (Embarcadero)Abhinav SP Building Production-Grade End to End Encrypted Applications AMC Theatre 12Ehsan Asdar • Nishil Shah Level Up Your Career: A Panel on Staff+ Engineering AMC Dolby (Theatre 13)Rami McCarthy • Lea Snyder • Hasnain Lakhani • Kurt Boberg

11:30am PDT

Community Cyber Defense: How to be a Local Cyber Hero AMC Theatre 14Sarah Powazek

11:35am PDT

Gamify security best practices to scalably improve engineering culture AMC Theatre 15David Trejo

11:40am PDT

Growing Your Skillset with Capture the Flag Après Village (Embarcadero)David Tomaschik

12:00pm PDT

Lunch Participation Hall

12:30pm PDT

Sponsor Raffle Participation Hall Android App Hacking - Hacking for Good AMC Workshops (Theatre 10)Maria Uretsky • Kavia Venkatesh • Sajjad Arshad • Olivier Tuchon

1:30pm PDT

Cross Site Scripting 101 Après Village (Embarcadero)Niru Ragupathy What Does it Mean to Build a Proactive Security Culture in an Organization AMC Theatre 15Mukund Sarma • Arkadiy Tetelman Catching the Phisherman AMC Dolby (Theatre 13)Nick Ascoli • Aidan Raney Hunting Supply Chain Threats Using Anomaly Detection AMC Theatre 14Craig Chamberlain Lessons Learned While Building a Privacy Operations Center at Headspace Health AMC Theatre 12Shobhit Mehta

2:00pm PDT

HSMs in Plain Envelopes: A Code Signing Story Après Village (Embarcadero)Alexis Hancock Tracking Meaningful Security Product Metrics AMC Theatre 15Leif Dreizler

2:30pm PDT

Defining a Data Masking Framework at Scale AMC Theatre 12Sohini Mukherjee • Tim Lam New Apps, Good Snacks: Effective Threat Modeling for New Territory AMC Theatre 15Breanne Boland New Face, Who Dis? Recent Adversarial Approaches to Facial Recognition AMC Dolby (Theatre 13)Mike Kiser Certificate Transparency Logs: Roadmaps to Riches or Ruin? AMC Theatre 14Nolan Reisbeck

3:00pm PDT

Life of a Bug (an insight on the GitHub bounty program) AMC Theatre 15Jeffrey Guerra • Caitlin Buckshaw NLP for security log analysis : Learning to crawl before you run AMC Theatre 12Arjun Chakraborty The History of Ransomware: From Floppies to Droppers, and Beyond AMC Dolby (Theatre 13)Eliad Kimhy

3:30pm PDT

Overwatch: A serverless approach to orchestrating your security automation AMC Theatre 15Sanchay Jaipuriyar FAIR STRIDE - Building Business Relevant Threat Models AMC Theatre 12Arthur Loris You lost data, unfortunately… Who will knock your door and why? AMC Dolby (Theatre 13)Gopi Ramamoorthy Detection as Code: The Engineering-Focused Future of Detection and Response AMC Theatre 14Jackie Bow • Julie Agnes Sparks • Jessica Rozhin • Alex Bainbridge • Justin Anderson

4:00pm PDT

When is a vulnerability not a vulnerability? Overcoming the inundation of noisy security alerts AMC Theatre 15Adam Berman

4:30pm PDT

Container vuln management with (hopefully) minimal burnout AMC Theatre 15Alex Chantavy Red Team Tales - 7 Years of Physical Penetration Testing AMC Dolby (Theatre 13)Justin Wynn Sleeping With One AI Open: An Introduction to Attacks Against Artificial Intelligence and Machine Learning AMC Theatre 12Eoin Wickens • Marta Janus To Normalized Logs, and Beyond - Building a Threat Detection Platform from Scratch AMC Theatre 14David Levitsky • Brian Maloney

5:00pm PDT

Scalable security: how to win friends and not burn out everyone AMC Theatre 15Eric Chiang • Brandon Weeks

5:30pm PDT

Happy Hour Participation Hall

6:30pm PDT

Party Participation Hall

9:00am PDT

Breakfast Participation Hall Coffee Participation HallOpal • Sprinkles • Tailscale Capture the Flag Twin Peaks Info Desk Lobby Prayer & Mother's Room Lobby Registration Mezzanine AMC Sponsors Participation Hall Badge Village Participation HallGitGuardian • Tessian Bug Bounty Village Participation HallGitGuardian • Tessian Careers Village Participation HallGitGuardian • Tessian Cloud Village Participation Hall Crypto & Privacy Village Participation HallGitGuardian • Tessian Day of Shecurity Participation HallGitGuardian • Tessian Electronic Frontier Foundation (EFF) Participation HallGitGuardian • Tessian IoT Village Participation HallGitGuardian • Tessian Lockpick Village Participation HallGitGuardian • Tessian Bar and Chill Out Participation Hall T-Shirt Sales Coat Check Coat Check Coat CheckNetflix

10:00am PDT

Opening Remarks AMC Dolby (Theatre 13)Reed Loden Outpwn: Gamified, Card-Based Cyber Warfare AMC Workshops (Theatre 10)Tony Loehr • Emery Hollingsworth

10:10am PDT

Hacking Policy and Policy Hacking - A Hacker Guide to the Universe of Cyber Policy AMC Dolby (Theatre 13)Dr. Amit Elazari

11:05am PDT

HALT AND CATCH FIRE: Social Engineering CTFs for fun to a job as a Professional Red Team Social Engineer AMC Theatre 15Alethe Denis Protecting Pinner Passwords AMC Theatre 14Aalaa Kamal Satti • Yuru Shao You don’t have to patch! AMC Theatre 12Pedro Fortuna • Jasvir Nagra

11:10am PDT

What I learned about security working minimum wage at Hollywood Video Après Village (Embarcadero)Ben Schmerler Take The Helm: Guidance For Prospective Future CISOs AMC Dolby (Theatre 13)Kyle Tobener • Emre Sağlam • Divya Dwarakanath • Arianna Willett • Katie Ledoux

11:35am PDT

Designing consumer account recovery in a 2FA world AMC Theatre 14Kelley Robinson Security Compliance as Code AMC Theatre 12Rahat Sethi • Danny Lee Windows 11 At Your Service AMC Theatre 15Michael Bargury

11:40am PDT

Bluetooth Low Energy Hacking 101 Après Village (Embarcadero)Matt Brown

12:00pm PDT

Lunch Participation Hall

12:30pm PDT

Sponsor Raffle Participation Hall Space Intruders: A Practical Guide to Building (& Maintaining) Your Cyber Threat Profile AMC Workshops (Theatre 10)Scott Small

1:30pm PDT

Scraping after HiQ Labs v. LinkedIn Après Village (Embarcadero)Hannah Zhao Malware Hunting - Discovering techniques in PDF malicious AMC Theatre 15Filipi Pires Securing the Pipeline: Protecting Self-Hosted GitHub Runners AMC Theatre 12Adnan Khan Sure, Let Business Users Build Their Own. What Could Go Wrong? AMC Theatre 14Michael Bargury The State of Blockchain Security - 2023 Edition AMC Dolby (Theatre 13)Peter Kacherginsky

2:30pm PDT

How Segment proactively protects customer’s API keys AMC Theatre 14Sal Olivares Advanced Attack Vectors in Azure Environments AMC Theatre 12Zur Ulianitzky • Bill Ben Haim Space and Cyberspace at the White House AMC Theatre 15Tanya Simms • Lauryn Williams The Best Defense is a Great Offense: Leveraging Automated OffSec to Build Proactive C2 Detections AMC Dolby (Theatre 13)Sam Manzer • Mike Parowski

3:00pm PDT

Backup Plans for Your Backup Plans for Your Backup Plans AMC Theatre 14Margaret Fero IR Workshop AMC Workshops (Theatre 10)Nathan Case

3:30pm PDT

Lost In Space: How to navigate Corporate Security as an Engineer AMC Theatre 14Maria Mora Using machine learning to detect sensitive documents on Sharepoint AMC Theatre 12Wilson Tang Placeholder for Dayzzz AMC Theatre 15Rojan Rijal First Security Hire: Building a security roadmap and team from scratch AMC Dolby (Theatre 13)Reed Loden • Tom Alcock • Mike McBryde • Coleen Coolidge • Kevin Hanaford

4:00pm PDT

Building an Endpoint Security program from scratch AMC Theatre 14Nishith Shah Launch Control - Automating a Security Baseline in the Cloud at Scale AMC Theatre 12David Levitsky • Olivia Hillman

4:30pm PDT

Disrupting Malicious Traffic with Egress Proxies AMC Theatre 12Dean Liu Secret Hunting AMC Dolby (Theatre 13)Tanya Janca Using an mTLS Identity Provider to achieve Password-less auth, Device Health Attestation, and low Earth orbit AMC Theatre 14Armen Tashjian MTV Reboot — my Super Sweet 16-bit malware ~*MS-DOS Edition*~ [TSR Remix] AMC Theatre 15Nika Korchok Wakulich

5:00pm PDT

How do you trust your open source software? AMC Theatre 14Naveen Srinivasan • Brian Russell Sandboxes all the way down - A hitchhiker's guide to platform containment AMC Theatre 12Tom DNetto WebAuthn, Yubikeys, and You: What we wish we knew before rolling out WebAuthn for internal use AMC Dolby (Theatre 13)Alex Toombs

5:30pm PDT

Closing Ceremony AMC Dolby (Theatre 13)Reed Loden