BSidesLV 2014

BSidesLV 2014 took place Aug. 5, 2014 through Aug. 6, 2014 (10 years, 3 months ago) at Tuscany Suites and Casino in Las Vegas, Nevada, USA.

Presentations

Tuesday, Aug. 5, 2014

09:00 - Hacking the Hustle Hands-On, Infosec Resume and Career Strategies
10:00 - Opening Keynote -- Beyond Good and Evil: Towards Effective Security
11:00 - Skull And Bones (And Warez) - Secret Societies of the Computer Underground (and why you should create one too)
11:00 - #edsec: Hacking for Education
11:00 - USB write blocking with USBProxy
11:00 - The Power Law of Information
11:00 - SHA-1 backdooring and exploitation
11:35 - So, you want to be a pentester?
11:45 - Evading code emulation: Writing ridiculously obvious malware that bypasses AV
11:50 - Measuring the IQ of your Threat Intelligence feeds
12:00 - Secure your email – Secure your password
12:00 - Custodiet watches your packets! The Open Source MSSP Framework
12:00 - Allow myself to encrypt...myself!
12:10 - Securing Sensitive Data: A Strange Game
12:30 - Is Pavlovian Password Management The Answer?
12:30 - Highlights of CMU’s Recent Work in Preventing Bad Passwords
14:00 - C.R.E.A.M. – The Art of Social Engineering Report Writing
14:00 - Security Management Without the Suck
14:00 - Strategies Without Frontiers
14:00 - Brick in the Wall vs Hole in the Wall
14:00 - What reaction to packet loss reveals about a VPN
14:00 - Password Hashing Competition: the Candidates
14:00 - DoCatsLikeLemon? – Advanced phrase attacks and analysis
14:00 - Master Serial Killer
14:30 - What Microsoft would like from the Password Hashing Competition
14:30 - Tradeoff cryptanalysis of password hashing schemes
14:35 - Cut the sh**: How to reign in your IDS.
15:00 - 501(c)(3) for (un)fun and (non)profit
15:00 - Vulnerability Assessments on SCADA: How i 'owned' the Power Grid.
15:00 - Using cryptanalysis to speed-up password cracking
15:00 - Untwisting the Mersenne Twister: How I killed the PRNG
15:10 - Geek Welfare -- Confessions of a Convention Swag Hoarder
15:30 - ClusterF*ck - Actionable Intelligence from Machine Learning
15:40 - Password Security in the PCI DSS
15:40 - How Forced Password Expiration Affects Password Choice
15:45 - No InfoSec Staff? No Problem.
16:00 - Anatomy of memory scraping, credit card stealing POS malware
16:00 - Protecting Data – How Cultural-Political Heritage Shapes Security Approaches
16:00 - Malware Analysis 101 - N00b to Ninja in 60 Minutes
16:20 - Can I Code Against an API to Learn a Product?
16:20 - Know thy operator
16:50 - Security for the People: End-User Authentication Security on the Internet
16:50 - Defense with 2FA
16:55 - Bridging the Air Gap: Cross Domain Solutions
17:00 - Travel Hacking With The Telecom Informer
17:00 - Cluck Cluck: On Intel's Broken Promises
17:00 - FAP Fully Automated Pwning Techniques for Automated Reversing
17:10 - Improving security by avoiding traffic and still get what you want in data transfers
17:30 - Back Dooring the Digital Home
18:00 - I have the hashcat so I make the rules
18:00 - The Semantic Age - or - A Young Ontologist's Primer
18:00 - Authentication in the Cloud – Building Service
18:40 - Penetrate your OWA
18:40 - How EFF is Making STARTTLS Resistant to Active Attacks
19:10 - Surprise talk + advisory release

Wednesday, Aug. 6, 2014

09:00 - Wireless Essentials
09:00 - You Hack, We Capture: Attack Analysis with Honeypots
10:00 - Introduction and Overview: I Am The Cavalry and Empowering Researchers
10:00 - The untold story about ATM Malware
10:00 - A Better Way to Get Intelligent About Threats
10:00 - All your SAP P@$$w0ЯdZ belong to us
10:00 - Proof of work as an additional factor of authentication
10:00 - Business lessons that made me a better Security Professional
10:00 - iOS URL Schemes: omg://
10:30 - Target specific automated dictionary generation
10:30 - The future of mobile authentication is here
10:35 - Oops, That Wasn't Suppossed To Happen: Bypassing Internet Explorer's Cross Site Scripting Filter
11:00 - Using Superpowers for Hardware Reverse Engineering
11:00 - Reverse Engineering Mac Malware
11:00 - Bring your own Risky Apps
11:00 - Problem Space Overview: I Am The Cavalry
11:10 - Password hashing delegation: How to get clients work for you
11:10 - What I've Learned As A Con-Man
11:10 - Bitslice DES with LOP3.LUT
11:45 - Training with Raspberry Pi
12:00 - Why am I surrounded by friggin' idiots?!? (Because you hired them!)
12:00 - Building Skills, Understanding and Influencing People
12:00 - Invasive Roots of Anti-Cheat Software
12:00 - Secret Pentesting Techniques Part Duex
12:10 - Net hashes: A review of many network protocols
12:10 - Throw the User ID Down the Well
12:20 - Black Magic and Secrets: How Certificates Influence You!
14:00 - Attacking Drupal
14:00 - RFID Hacking
14:00 - Password Generators & Extended Character Set Passwords
14:00 - Ripped from the Headlines What the news tells us about Information Security Incidents
14:00 - Demystiphying and Fingerprinting the 802.15.4/ZigBee PHY
14:00 - Vaccinating Android
14:00 - Energy-efficient bcrypt cracking
14:35 - Hackers vs Auditors
15:00 - Insider Threat Kill Chain: Human Indicators of Compromise
15:00 - Fuck These Guys: Practical Countersurveillance
15:00 - Security testing for Smart Metering Infrastructure
15:10 - The problem with the real world
15:10 - Encryption and Authentication: Passwords for all reasons
15:10 - Third-Party Service Provider Diligence: Why are we doing it all wrong?
15:30 - A Place to Hang Our Hats: Security Community and Culture
15:45 - Pwning the hapless or How to Make Your Security Program Not Suck
15:50 - Enhancing Password Based Key Derivation Techniques
15:50 - Password Topology Histogram Wear-Leveling, a.k.a. PathWell
16:00 - The Savage Curtain
16:00 - Booze, Devil's Advocate, and Hugs: the Best Debates Panel You'll See at BSidesLV 2014
16:00 - Ask the EFF
16:20 - Teach a man to Phish...
16:55 - The Lore shows the Way
17:00 - Capturing Passwords into the Secure Desktop
17:00 - Pwning the Pawns with WiHawk
17:00 - We Hacked the Gibson! Now what?
17:00 - The Only Way to Tell the Truth is in Fiction: The Dynamics of Life in the National Security State
17:00 - Beam Me Up Scotty! – Passwords in the Enterprise
18:00 - Closing Keynote

Presenters