BSidesSF 2019 has ended

Create Your Own Event

BSidesSF 2019

9:00am PST

Monitoring Minimum Viable Security via osquery on Mac, Windows, Linux, and ContainersFull Splunk HQGuillaume Ross Practical Threat ModelingFull Splunk HQKevin Riggle Reverse Engineering Mobile AppsFull Splunk HQSam Bowne Using the Secrets of Behavioral Science to Influence SecurityFull Splunk HQMegan Caldwell • Robert Fly • Masha Sedova

12:30pm PST

Building Secure APIs and Web ApplicationsFull Splunk HQJim Manico • Jimmy Mesta RFID HackingFull Splunk HQValentin Leon Spy Hunter: Reversing Your First Android SurveillancewareFull Splunk HQKristina Balaam Using Open Source Log Aggregation Tools to Improve Enterprise SecurityFull Splunk HQLennart Koopmann • Jim Nitterauer

9:00am PST

Breakfast GeneralBugcrowd • Segment Coffee Sponsors Area Capture The Flag GeneralFacebook Sponsor Lounge Sponsors Area Crypto & Privacy Village VillagesCrypto & Privacy Village • F-Secure • Veracode IoT Village VillagesIndependent Security Evaluators (ISE) • F-Secure • Veracode Living Security Escape Room VillagesLiving Security • F-Secure • Veracode Lockpick Village VillagesLockpick Extreme • TOOOL SF • F-Secure • Veracode Spymaster Challenge VillagesCisco CSIRT • F-Secure • Veracode Registration General Bar BarParanoids at Verizon Media Info Desk General Coat Check Coat Check

10:00am PST

Opening Remarks IMAXReed Loden

10:15am PST

The Path to Infosec Is Not Always Linear IMAXRachel Tobac

11:00am PST

How to Build an Application Security Program City ViewJerry Gamblin Lyft Cartography: Automating Security Visibility and Democratization IMAXSacha Faust Self Care for Security Professionals Theater 14 (overflow in #10)Caroline Wong Conquer the Enterprise from Inside with Penetration Testing Dropboxes Theater 15 (overflow in #11)Simon Roses Femerling

11:45am PST

Cats? In My Certificate Transparency Logs? It's More Likely Than You Think City ViewScott Behrens • Ian Haken How to Orchestrate a Cyber Security Incident Tabletop Exercise IMAXMelanie Masterson Contact Center Authenticaion Theater 14 (overflow in #10)Kelley Robinson Operation PZCHAO Theater 15 (overflow in #11)Ivona-Alexandra Chili

12:00pm PST

Lunch GeneralASAPP BSides Career Chit-Chat AMC Lounge

12:15pm PST

T-Shirt Sales Coat Check

1:30pm PST

A Deep Dive into Go Malware: Using Metadata to Empower the Analyst City ViewJoakim Kennedy How to Lose a Container in 10 Minutes IMAXSarah Young Arcades and Audits: What Gaming Can Do for Your Security Posture Theater 14 (overflow in #10)Miranda Fullerton Twist & Shout: Ferris Bueller's Guide to Abuse Domain Permutations Theater 15 (overflow in #11)Kelly Albrink • Rob Ragan

2:10pm PST

The Secure Metamorphosis: Streaming Logs with Kafka and TLS City ViewTyler Paxton Hacking with a Heads Up Display IMAXDavid Scrobonia Slack App Security: Securing Your Workspaces from a Bot Uprising Theater 14 (overflow in #10)Kelly Ann Attacking Deep Learning-Based NLP Systems with Malicious Word Embeddings Theater 15 (overflow in #11)Toshiro Nishimura

2:50pm PST

Security Automation Simplified City ViewMoses Schwartz Offensive Javascript Techniques for Red Teamers (Or Anyone Really) IMAXDylan Ayrey • Christian Frichot Friend or Replicant: How Attackers Automate and Disguise Themselves in a Shroud of Authenticity to Gain Followers, Control Influence, and Malign Credit Theater 14 (overflow in #10)Anna Westelius Owning the Smart Home with Logitech Harmony Hub Theater 15 (overflow in #11)Joseph Bingham

3:30pm PST

Bye-Bye False Positives: Using AI to Improve Detection City ViewIvan Novikov Building Identity for an Open Perimeter IMAXTejas Dharamshi Ethical Hacking: DIY Mobile Security Workstation (For Cheap) Theater 14 (overflow in #10)Dale Meredith High Performance VM Introspection Using Virtualization Exceptions Theater 15 (overflow in #11)Cristinel-Ionel Anichitei • Raul Tosa

4:10pm PST

WHOIS Calling the 80s to Get Their Finger Back: LOL with Old TCP Services City ViewJoakim Kennedy Automating Web Application Bug Hunting IMAXJonathan Cran • Jerry Gamblin Journey to Command Injection: Hacking the Lenovo ix4-300d Theater 15 (overflow in #11)Rick Ramgattie

4:50pm PST

Strangeways, Here We Come: A Journey from On-Prem to Cloud First with AWS City ViewVictor Clark Ask the EFF IMAXAndrew Crocker • Alexis Hancock • Sydney Li • India McKinney • Alex Moss • Kurt Opsahl • Cooper Quintin Navigating Passwordless Authentication with FIDO2 & WebAuthn Theater 15 (overflow in #11)Jerrod Chong

5:30pm PST

Happy Hour BarCybrary

6:30pm PST

Party City ViewValimail

9:00am PST

Breakfast GeneralPluralsight Coffee Sponsors Area Capture The Flag GeneralFacebook Bar BarParanoids at Verizon Media Registration General Sponsor Lounge Sponsors Area Crypto & Privacy Village VillagesCrypto & Privacy Village • F-Secure • Veracode IoT Village VillagesIndependent Security Evaluators (ISE) • F-Secure • Veracode Living Security Escape Room VillagesLiving Security • F-Secure • Veracode Lockpick Village VillagesLockpick Extreme • TOOOL SF • F-Secure • Veracode Spymaster Challenge VillagesCisco CSIRT • F-Secure • Veracode T-Shirt Sales Coat Check Info Desk General Coat Check Coat Check

10:00am PST

Opening Remarks IMAXReed Loden

10:15am PST

Securing Online Identities with Simple, Secure, Open Standards IMAXStina Ehrensvard

11:00am PST

Abusing WCF Endpoint for RCE and Privilege Escalation City ViewChristopher Anastasio How to Fix the Diversity Gap in Cybersecurity IMAXChloé Messdaghi Anti-Privacy Anti-Patterns Theater 14 (overflow in #10)Sarah Harvey Making Sense of Unstructured Threat Data Theater 15 (overflow in #11)Zainab Danish • Nicolas Kseib

11:45am PST

BADPDF: Stealing Windows Credentials via PDF Files City ViewAdi Ikan • Ido Solomon Don't Boil the Ocean: Using MITRE ATT&CK to Guide Hunting Activity IMAXJohn Stoner Surfing the Motivation Wave to Create Security Behavior Change Theater 14 (overflow in #10)Masha Sedova Guarding Against Protocol Subversion at Coinbase Theater 15 (overflow in #11)Mark Nesbitt

12:00pm PST

Lunch GeneralIntezer BSides Career Chit-Chat AMC Lounge

1:30pm PST

Implementing a Kick-Butt Training Program: BLUE TEAM GO! City ViewRyan Chapman Career Mutation: A Panel on the Evolution to Management in Security IMAXZach Powers • Rachel Black • Chris Dorros • Daed Latrope • Kyle Tobener • Xiaoran Wang Goldilocks and the Three ATM Attacks Theater 14 (overflow in #10)David M. N. Bryan Fuzzing Malware for Fun & Profit: Applying Coverage-Guided Fuzzing to Find and Exploit Bugs in Modern Malware Theater 15 (overflow in #11)Maksim Shudrak

2:10pm PST

HTTP Security Headers: A Technology History Through Scar Tissue City ViewBenjamin Hering Deploying Two-Factor Authentication to Millions of Users IMAXEmanuele Cesena Do You Even Tech Anymore: Management & Leadership in Security? Theater 14 (overflow in #10)Mark Hillick Profiling "VIP Accounts" Access Patterns in User-Centric Data Streams Theater 15 (overflow in #11)Xiodan Li • Rod soto • Joseph Zadeh

2:50pm PST

Concrete Steps to Create a Security Culture City ViewArkadiy Tetelman Containers: Your Ally in Improving Security IMAXConnor Gilbert • Connor Gorman Vendor Security: Where Our Data Goes We Follow Theater 14 (overflow in #10)Justin Calmus • Rachel Black • Vivienne Pustell • Niru Ragupathy • Kyle Tobener • Wendy Zenone Two-Faces of WASM Security Theater 15 (overflow in #11)Kaizhe Huang • Pranjal Jumde

3:30pm PST

DevSecOps State of the Union City ViewClint Gibler You Might Still Need Patches for Your Denim, but You No Longer Need Them for Prod IMAXMaya Kaczorowski • Dan Lorenc Collect All the Data; Protect All the Things Theater 14 (overflow in #10)Aaron Rosenmund Shall We Play a Game? Theater 15 (overflow in #11)J. Wolfgang Goerlich

4:10pm PST

Treat the Problems, Not the Symptoms: Baby Steps to a More Secure Active Directory Environment City ViewIgal Gofman • Yaron Shani All Your Containers Are Belong to Us IMAXJames Condon Beyond AV: Detection-Oriented File Analysis Theater 15 (overflow in #11)Josh Liburdi

4:50pm PST

Do Androids Dream of Electric Fences?: Defending Android in the Enterprise City ViewBrandon Weeks Back to the SOCless Future: Implementing Monitoring & Response Through Automation IMAXUbani Balogun RadRAT: An all-in-one toolkit for complex espionage ops Theater 15 (overflow in #11)Ivona-Alexandra Chili

5:30pm PST

Closing Ceremony City ViewReed Loden