BSidesLV 2014

BSidesLV 2014 took place Aug. 5, 2014 through Aug. 6, 2014 (11 years ago) at Tuscany Suites and Casino in Las Vegas, Nevada, USA.

Presentations

Tuesday, Aug. 5, 2014

09:00 - Hacking the Hustle Hands-On, Infosec Resume and Career Strategies
10:00 - Opening Keynote -- Beyond Good and Evil: Towards Effective Security
11:00 - Skull And Bones (And Warez) - Secret Societies of the Computer Underground (and why you should create one too)
11:00 - #edsec: Hacking for Education
11:00 - USB write blocking with USBProxy
11:00 - The Power Law of Information
11:00 - SHA-1 backdooring and exploitation
11:35 - So, you want to be a pentester?
11:45 - Evading code emulation: Writing ridiculously obvious malware that bypasses AV
11:50 - Measuring the IQ of your Threat Intelligence feeds
12:00 - Secure your email – Secure your password
12:00 - Custodiet watches your packets! The Open Source MSSP Framework
12:00 - Allow myself to encrypt...myself!
12:10 - Securing Sensitive Data: A Strange Game
12:30 - Is Pavlovian Password Management The Answer?
12:30 - Highlights of CMU’s Recent Work in Preventing Bad Passwords
14:00 - C.R.E.A.M. – The Art of Social Engineering Report Writing
14:00 - Security Management Without the Suck
14:00 - Strategies Without Frontiers
14:00 - Brick in the Wall vs Hole in the Wall
14:00 - What reaction to packet loss reveals about a VPN
14:00 - Password Hashing Competition: the Candidates
14:00 - DoCatsLikeLemon? – Advanced phrase attacks and analysis
14:00 - Master Serial Killer
14:30 - What Microsoft would like from the Password Hashing Competition
14:30 - Tradeoff cryptanalysis of password hashing schemes
14:35 - Cut the sh**: How to reign in your IDS.
15:00 - 501(c)(3) for (un)fun and (non)profit
15:00 - Vulnerability Assessments on SCADA: How i 'owned' the Power Grid.
15:00 - Using cryptanalysis to speed-up password cracking
15:00 - Untwisting the Mersenne Twister: How I killed the PRNG
15:10 - Geek Welfare -- Confessions of a Convention Swag Hoarder
15:30 - ClusterF*ck - Actionable Intelligence from Machine Learning
15:40 - Password Security in the PCI DSS
15:40 - How Forced Password Expiration Affects Password Choice
15:45 - No InfoSec Staff? No Problem.
16:00 - Anatomy of memory scraping, credit card stealing POS malware
16:00 - Protecting Data – How Cultural-Political Heritage Shapes Security Approaches
16:00 - Malware Analysis 101 - N00b to Ninja in 60 Minutes
16:20 - Can I Code Against an API to Learn a Product?
16:20 - Know thy operator
16:50 - Security for the People: End-User Authentication Security on the Internet
16:50 - Defense with 2FA
16:55 - Bridging the Air Gap: Cross Domain Solutions
17:00 - Travel Hacking With The Telecom Informer
17:00 - Cluck Cluck: On Intel's Broken Promises
17:00 - FAP Fully Automated Pwning Techniques for Automated Reversing
17:10 - Improving security by avoiding traffic and still get what you want in data transfers
17:30 - Back Dooring the Digital Home
18:00 - I have the hashcat so I make the rules
18:00 - The Semantic Age - or - A Young Ontologist's Primer
18:00 - Authentication in the Cloud – Building Service
18:40 - Penetrate your OWA
18:40 - How EFF is Making STARTTLS Resistant to Active Attacks
19:10 - Surprise talk + advisory release

Wednesday, Aug. 6, 2014

09:00 - Wireless Essentials
09:00 - You Hack, We Capture: Attack Analysis with Honeypots
10:00 - Introduction and Overview: I Am The Cavalry and Empowering Researchers
10:00 - The untold story about ATM Malware
10:00 - A Better Way to Get Intelligent About Threats
10:00 - All your SAP P@$$w0ЯdZ belong to us
10:00 - Proof of work as an additional factor of authentication
10:00 - Business lessons that made me a better Security Professional
10:00 - iOS URL Schemes: omg://
10:30 - Target specific automated dictionary generation
10:30 - The future of mobile authentication is here
10:35 - Oops, That Wasn't Suppossed To Happen: Bypassing Internet Explorer's Cross Site Scripting Filter
11:00 - Using Superpowers for Hardware Reverse Engineering
11:00 - Reverse Engineering Mac Malware
11:00 - Bring your own Risky Apps
11:00 - Problem Space Overview: I Am The Cavalry
11:10 - Password hashing delegation: How to get clients work for you
11:10 - What I've Learned As A Con-Man
11:10 - Bitslice DES with LOP3.LUT
11:45 - Training with Raspberry Pi
12:00 - Why am I surrounded by friggin' idiots?!? (Because you hired them!)
12:00 - Building Skills, Understanding and Influencing People
12:00 - Invasive Roots of Anti-Cheat Software
12:00 - Secret Pentesting Techniques Part Duex
12:10 - Net hashes: A review of many network protocols
12:10 - Throw the User ID Down the Well
12:20 - Black Magic and Secrets: How Certificates Influence You!
14:00 - Attacking Drupal
14:00 - RFID Hacking
14:00 - Password Generators & Extended Character Set Passwords
14:00 - Ripped from the Headlines What the news tells us about Information Security Incidents
14:00 - Demystiphying and Fingerprinting the 802.15.4/ZigBee PHY
14:00 - Vaccinating Android
14:00 - Energy-efficient bcrypt cracking
14:35 - Hackers vs Auditors
15:00 - Insider Threat Kill Chain: Human Indicators of Compromise
15:00 - Fuck These Guys: Practical Countersurveillance
15:00 - Security testing for Smart Metering Infrastructure
15:10 - The problem with the real world
15:10 - Encryption and Authentication: Passwords for all reasons
15:10 - Third-Party Service Provider Diligence: Why are we doing it all wrong?
15:30 - A Place to Hang Our Hats: Security Community and Culture
15:45 - Pwning the hapless or How to Make Your Security Program Not Suck
15:50 - Enhancing Password Based Key Derivation Techniques
15:50 - Password Topology Histogram Wear-Leveling, a.k.a. PathWell
16:00 - The Savage Curtain
16:00 - Booze, Devil's Advocate, and Hugs: the Best Debates Panel You'll See at BSidesLV 2014
16:00 - Ask the EFF
16:20 - Teach a man to Phish...
16:55 - The Lore shows the Way
17:00 - Capturing Passwords into the Secure Desktop
17:00 - Pwning the Pawns with WiHawk
17:00 - We Hacked the Gibson! Now what?
17:00 - The Only Way to Tell the Truth is in Fiction: The Dynamics of Life in the National Security State
17:00 - Beam Me Up Scotty! – Passwords in the Enterprise
18:00 - Closing Keynote

Presenters