BSidesSF 2019 has ended

Create Your Own Event

BSidesSF 2019

arrow_back View All Dates

9:00am PST

Breakfast GeneralBugcrowd • Segment Coffee Sponsors Area Capture The Flag GeneralFacebook Sponsor Lounge Sponsors Area Crypto & Privacy Village VillagesCrypto & Privacy Village • F-Secure • Veracode IoT Village VillagesIndependent Security Evaluators (ISE) • F-Secure • Veracode Living Security Escape Room VillagesLiving Security • F-Secure • Veracode Lockpick Village VillagesLockpick Extreme • TOOOL SF • F-Secure • Veracode Spymaster Challenge VillagesCisco CSIRT • F-Secure • Veracode Registration General Bar BarParanoids at Verizon Media Info Desk General Coat Check Coat Check

10:00am PST

Opening Remarks IMAXReed Loden

10:15am PST

The Path to Infosec Is Not Always Linear IMAXRachel Tobac

11:00am PST

How to Build an Application Security Program City ViewJerry Gamblin Lyft Cartography: Automating Security Visibility and Democratization IMAXSacha Faust Self Care for Security Professionals Theater 14 (overflow in #10)Caroline Wong Conquer the Enterprise from Inside with Penetration Testing Dropboxes Theater 15 (overflow in #11)Simon Roses Femerling

11:45am PST

Cats? In My Certificate Transparency Logs? It's More Likely Than You Think City ViewScott Behrens • Ian Haken How to Orchestrate a Cyber Security Incident Tabletop Exercise IMAXMelanie Masterson Contact Center Authenticaion Theater 14 (overflow in #10)Kelley Robinson Operation PZCHAO Theater 15 (overflow in #11)Ivona-Alexandra Chili

12:00pm PST

Lunch GeneralASAPP BSides Career Chit-Chat AMC Lounge

12:15pm PST

T-Shirt Sales Coat Check

1:30pm PST

A Deep Dive into Go Malware: Using Metadata to Empower the Analyst City ViewJoakim Kennedy How to Lose a Container in 10 Minutes IMAXSarah Young Arcades and Audits: What Gaming Can Do for Your Security Posture Theater 14 (overflow in #10)Miranda Fullerton Twist & Shout: Ferris Bueller's Guide to Abuse Domain Permutations Theater 15 (overflow in #11)Kelly Albrink • Rob Ragan

2:10pm PST

The Secure Metamorphosis: Streaming Logs with Kafka and TLS City ViewTyler Paxton Hacking with a Heads Up Display IMAXDavid Scrobonia Slack App Security: Securing Your Workspaces from a Bot Uprising Theater 14 (overflow in #10)Kelly Ann Attacking Deep Learning-Based NLP Systems with Malicious Word Embeddings Theater 15 (overflow in #11)Toshiro Nishimura

2:50pm PST

Security Automation Simplified City ViewMoses Schwartz Offensive Javascript Techniques for Red Teamers (Or Anyone Really) IMAXDylan Ayrey • Christian Frichot Friend or Replicant: How Attackers Automate and Disguise Themselves in a Shroud of Authenticity to Gain Followers, Control Influence, and Malign Credit Theater 14 (overflow in #10)Anna Westelius Owning the Smart Home with Logitech Harmony Hub Theater 15 (overflow in #11)Joseph Bingham

3:30pm PST

Bye-Bye False Positives: Using AI to Improve Detection City ViewIvan Novikov Building Identity for an Open Perimeter IMAXTejas Dharamshi Ethical Hacking: DIY Mobile Security Workstation (For Cheap) Theater 14 (overflow in #10)Dale Meredith High Performance VM Introspection Using Virtualization Exceptions Theater 15 (overflow in #11)Cristinel-Ionel Anichitei • Raul Tosa

4:10pm PST

WHOIS Calling the 80s to Get Their Finger Back: LOL with Old TCP Services City ViewJoakim Kennedy Automating Web Application Bug Hunting IMAXJonathan Cran • Jerry Gamblin Journey to Command Injection: Hacking the Lenovo ix4-300d Theater 15 (overflow in #11)Rick Ramgattie

4:50pm PST

Strangeways, Here We Come: A Journey from On-Prem to Cloud First with AWS City ViewVictor Clark Ask the EFF IMAXAndrew Crocker • Alexis Hancock • Sydney Li • India McKinney • Alex Moss • Kurt Opsahl • Cooper Quintin Navigating Passwordless Authentication with FIDO2 & WebAuthn Theater 15 (overflow in #11)Jerrod Chong

5:30pm PST

Happy Hour BarCybrary

6:30pm PST

Party City ViewValimail