BSidesSF 2019 has ended

Create Your Own Event

BSidesSF 2019

arrow_back View All Dates

9:00am PST

Breakfast GeneralPluralsight Coffee Sponsors Area Capture The Flag GeneralFacebook Bar BarParanoids at Verizon Media Registration General Sponsor Lounge Sponsors Area Crypto & Privacy Village VillagesCrypto & Privacy Village • F-Secure • Veracode IoT Village VillagesIndependent Security Evaluators (ISE) • F-Secure • Veracode Living Security Escape Room VillagesLiving Security • F-Secure • Veracode Lockpick Village VillagesLockpick Extreme • TOOOL SF • F-Secure • Veracode Spymaster Challenge VillagesCisco CSIRT • F-Secure • Veracode T-Shirt Sales Coat Check Info Desk General Coat Check Coat Check

10:00am PST

Opening Remarks IMAXReed Loden

10:15am PST

Securing Online Identities with Simple, Secure, Open Standards IMAXStina Ehrensvard

11:00am PST

Abusing WCF Endpoint for RCE and Privilege Escalation City ViewChristopher Anastasio How to Fix the Diversity Gap in Cybersecurity IMAXChloé Messdaghi Anti-Privacy Anti-Patterns Theater 14 (overflow in #10)Sarah Harvey Making Sense of Unstructured Threat Data Theater 15 (overflow in #11)Zainab Danish • Nicolas Kseib

11:45am PST

BADPDF: Stealing Windows Credentials via PDF Files City ViewAdi Ikan • Ido Solomon Don't Boil the Ocean: Using MITRE ATT&CK to Guide Hunting Activity IMAXJohn Stoner Surfing the Motivation Wave to Create Security Behavior Change Theater 14 (overflow in #10)Masha Sedova Guarding Against Protocol Subversion at Coinbase Theater 15 (overflow in #11)Mark Nesbitt

12:00pm PST

Lunch GeneralIntezer BSides Career Chit-Chat AMC Lounge

1:30pm PST

Implementing a Kick-Butt Training Program: BLUE TEAM GO! City ViewRyan Chapman Career Mutation: A Panel on the Evolution to Management in Security IMAXZach Powers • Rachel Black • Chris Dorros • Daed Latrope • Kyle Tobener • Xiaoran Wang Goldilocks and the Three ATM Attacks Theater 14 (overflow in #10)David M. N. Bryan Fuzzing Malware for Fun & Profit: Applying Coverage-Guided Fuzzing to Find and Exploit Bugs in Modern Malware Theater 15 (overflow in #11)Maksim Shudrak

2:10pm PST

HTTP Security Headers: A Technology History Through Scar Tissue City ViewBenjamin Hering Deploying Two-Factor Authentication to Millions of Users IMAXEmanuele Cesena Do You Even Tech Anymore: Management & Leadership in Security? Theater 14 (overflow in #10)Mark Hillick Profiling "VIP Accounts" Access Patterns in User-Centric Data Streams Theater 15 (overflow in #11)Xiodan Li • Rod soto • Joseph Zadeh

2:50pm PST

Concrete Steps to Create a Security Culture City ViewArkadiy Tetelman Containers: Your Ally in Improving Security IMAXConnor Gilbert • Connor Gorman Vendor Security: Where Our Data Goes We Follow Theater 14 (overflow in #10)Justin Calmus • Rachel Black • Vivienne Pustell • Niru Ragupathy • Kyle Tobener • Wendy Zenone Two-Faces of WASM Security Theater 15 (overflow in #11)Kaizhe Huang • Pranjal Jumde

3:30pm PST

DevSecOps State of the Union City ViewClint Gibler You Might Still Need Patches for Your Denim, but You No Longer Need Them for Prod IMAXMaya Kaczorowski • Dan Lorenc Collect All the Data; Protect All the Things Theater 14 (overflow in #10)Aaron Rosenmund Shall We Play a Game? Theater 15 (overflow in #11)J. Wolfgang Goerlich

4:10pm PST

Treat the Problems, Not the Symptoms: Baby Steps to a More Secure Active Directory Environment City ViewIgal Gofman • Yaron Shani All Your Containers Are Belong to Us IMAXJames Condon Beyond AV: Detection-Oriented File Analysis Theater 15 (overflow in #11)Josh Liburdi

4:50pm PST

Do Androids Dream of Electric Fences?: Defending Android in the Enterprise City ViewBrandon Weeks Back to the SOCless Future: Implementing Monitoring & Response Through Automation IMAXUbani Balogun RadRAT: An all-in-one toolkit for complex espionage ops Theater 15 (overflow in #11)Ivona-Alexandra Chili

5:30pm PST

Closing Ceremony City ViewReed Loden