BSidesSF 2023

Finding Bugs and Scaling Your Security Program with Semgrep 10:00am - 12:00pm

Android App Hacking - Hacking for Good 12:30pm - 5:30pm

Building Production-Grade End to End Encrypted Applic... 11:10am - 12:00pm

Lessons Learned While Building a Privacy Operations C... 1:30pm - 2:20pm

Defining a Data Masking Framework at Scale

NLP for security log analysis : Learning to craw...

FAIR STRIDE - Building Business Relevant Threat Model... 3:30pm - 4:20pm

Sleeping With One AI Open: An Introduction to Attacks... 4:30pm - 5:20pm

Opening Remarks

The Expanding Universe of Cyber Threats 10:10am - 11:00am

Level Up Your Career: A Panel on Staff+ Engineering 11:10am - 12:00pm

Catching the Phisherman 1:30pm - 2:20pm

New Face, Who Dis? Recent Adversarial Approaches...

The History of Ransomware: From Floppies to Drop...

Detection as Code: The Engineering-Focused Future of... 3:30pm - 4:20pm

Red Team Tales - 7 Years of Physical Penetration Test... 4:30pm - 5:20pm

Stop Committing Yo...

Community Cyber De...

Hunting Supply Chain Threats Using Anomaly Detection 1:30pm - 2:20pm

Certificate Transparency Logs: Roadmaps to Riches or... 2:30pm - 3:20pm

You lost data, unfortunately… Who will knock on your... 3:30pm - 4:20pm

To Normalized Logs, and Beyond - Building a Threat De... 4:30pm - 5:20pm

No Adversaries: Getting Users on Your Side for T...

Gamify security best practices to scalably impro...

What Does it Mean to Build a Proactive Security...

Tracking Meaningful Security Product Metrics

New Apps, Good Snacks: Effective Threat Modeling...

Life of a Bug (an insight on the GitHub bounty p...

Overwatch: A serverless approach to orchestratin...

When is a vulnerability not a vulnerability? Ove...

Container vuln management with (hopefully) minim...

Scalable security: how to win friends and not bu...

Making of the BSid...

Growing Your Skill...

Cross Site Scripti...

HSMs in Plain Envelopes: A Code... 2:00pm - 2:30pm

Career Village - t...

Hackers Don't Care...

Hiring and Intervi...

Lounge 9:00am - 5:30pm

Coat Check 9:00am - 10:00pm

T-Shirt Sales 11:00am - 9:00pm

Prayer & Mother's Room 9:00am - 6:30pm

Info Desk 9:00am - 6:30pm

Registration 9:00am - 5:30pm

Breakfast 9:00am - 10:00am

Electronic Frontier Foundation (EFF) 9:00am - 5:00pm

Badge Village 9:00am - 5:00pm

Sponsors 9:00am - 5:00pm

Cloud Village 9:00am - 5:00pm

Career Village 9:00am - 5:00pm

Coffee 9:00am - 5:00pm

Day of Shecurity 9:00am - 5:00pm

IoT Village 9:00am - 5:00pm

Lockpick Village 9:00am - 5:00pm

Bug Bounty Village 9:00am - 5:00pm

Crypto & Privacy Village 9:00am - 5:00pm

Lunch 12:00pm - 1:30pm

Outpwn: Gamified, Card-Based Cyber Warfare 10:00am - 12:00pm

Space Intruders: A Practical Guide to Building (& Maintaining) Your Cyber Threat Profile 12:30pm - 2:30pm

IR Workshop 3:00pm - 5:00pm

You don’t have to patch! 11:05am - 11:30am

Security Compliance as Code 11:35am - 12:00pm

Securing the Pipeline: Protecting Self-Hosted GitHub... 1:30pm - 2:20pm

Advanced Attack Vectors in Azure Environments 2:30pm - 3:20pm

Using machine learning to detect sensitive docum...

Launch Control - Automating a Security Baseline...

Disrupting Malicious Traffic with Egress Proxies

Sandboxes all the way down - A hitchhiker's guid...

Opening Remarks

Hacking Policy and Policy Hacking - A Hacker Guide to... 10:10am - 11:00am

Take The Helm: Guidance For Prospective Future CISOs 11:10am - 12:00pm

The State of Blockchain Security - 2023 Edition 1:30pm - 2:20pm

The Best Defense is a Great Offense: Leveraging Autom... 2:30pm - 3:20pm

First Security Hire: Building a security roadmap and... 3:30pm - 4:20pm

Secret Hunting 4:30pm - 4:55pm

WebAuthn, Yubikeys, and You: What we wish we kne...

Closing Ceremony 5:30pm - 6:30pm

Protecting Pinner Passwords 11:05am - 11:30am

Designing consumer account recovery in a 2FA wor...

Sure, Let Business Users Build Their Own. What Could... 1:30pm - 2:20pm

How Segment proactively protects customer’s API...

Backup Plans for Your Backup Plans for Your Back...

Lost In Space: How to navigate Corporate Securit...

Building an Endpoint Security program from scrat...

Using an mTLS Identity Provider to achieve Passw...

How do you trust your open source software?

HALT AND CATCH FIRE: Social Engineering CTFs for...

Windows 11 At Your Service 11:35am - 12:00pm

(Canceled) Malware Hunting - Discovering techniques i... 1:30pm - 2:20pm

Space and Cyberspace at the White House 2:30pm - 3:20pm

Placeholder for Dayzzz 3:30pm - 4:20pm

MTV Reboot — my Super Sweet 16-bit malware ~*MS-DOS E... 4:30pm - 5:20pm

What I learned abo...

Cameras, CACs & Cl...

Scraping after HiQ...

Hacking the Hiring...

Security Hiring Tr...

The Big “P” Proble...

Go Far Together: B...

How to CTF Infra - Beyond the challenges and fla... 4:00pm - 4:45pm

Lounge 9:00am - 5:30pm

Coat Check 9:00am - 7:00pm

T-Shirt Sales 9:00am - 5:30pm

Info Desk 9:00am - 5:00pm

Prayer & Mother's Room 9:00am - 5:00pm

Registration 9:00am - 5:00pm

Breakfast 9:00am - 10:00am

Bug Bounty Village 9:00am - 5:00pm

Crypto & Privacy Village 9:00am - 5:00pm

Cloud Village 9:00am - 5:00pm

Badge Village 9:00am - 5:00pm

IoT Village 9:00am - 5:00pm

Sponsors 9:00am - 5:00pm

Electronic Frontier Foundation (EFF) 9:00am - 5:00pm

Career Village 9:00am - 5:00pm

Lockpick Village 9:00am - 5:00pm

Day of Shecurity 9:00am - 5:00pm

Coffee 9:00am - 3:00pm

Lunch 12:00pm - 1:30pm