BSidesLV 2016

BSidesLV 2016 took place Aug. 2, 2016 through Aug. 3, 2016 (7 years, 8 months ago) at Tuscany Suites and Casino in Las Vegas, Nevada, USA.

Presentations

Tuesday, Aug. 2, 2016

08:30 - Doxing yourself through FOIA: understanding agency data structures to reverse engineer FOIA requests.
10:00 - Opening Keynote Pt. I & II Keynote
11:00 - Network Access Control: The Company-Wide Team Building Exercise That Only You Know About
11:00 - Managing Security with the OWASP Assimilation Project.
11:00 - Shall We Play A Game? 30 Years of the CFAA
11:00 - Hire Ground - Opening Remarks
11:00 - What Snowden and I Have in Common - Reflections of an ex-NSA Hacker
11:00 - Data Science or Data Pseudo-Science? Applying Data Science Concepts to Infosec without a PhD
11:00 - IATC Introduction and Overview
11:00 - Toward Better Password Requirements
11:30 - Calling All Hacker Heroes: Go Above And Beyond
11:30 - Hire Ground - Open Sessions
11:30 - Intro to Storage Security, Looking Past the Server
11:45 - Are You A PenTexter? Open-Sourcing Pentest Reporting and Automation.
12:00 - What's Up Argon2? The Password Hashing Winner A Year Later
12:00 - Deep Adversarial Architectures for Detecting (and Generating) Maliciousness
12:00 - Panel: Progress On Cyber Safety
12:00 - Automation of Penetration Testing and the future
12:00 - Navigating Different Career Paths in Security
14:00 - Flaying out the Blockchain Ledger for Fun, Profit, and Hip Hop
14:00 - Cruise Line Security Assessment OR Hacking the High Seas
14:00 - Rock Salt: A Method for Securely Storing and Utilizing Password Validation Data
14:00 - Cyber Safety And Public Policy
14:00 - Welcome to The World of Yesterday, Tomorrow!
14:00 - Breaking the Payment Points of Interaction (POI)
14:00 - Active Incident Response
14:00 - How to securely build your own IoT enabling embedded systems: from design to execution and assessment
14:30 - Security Vulnerabilities, the Current State of Consumer Protection Law, & how IOT Might Change It
15:00 - Defeating Machine Learning: Systemic Deficiencies for Detecting Malware
15:00 - Exposing the Neutrino EK: All the Naughty Bits
15:00 - State Of Healthcare Cyber Safety
15:00 - Generation C: "Hacker" Kids and the Innovation Nation
15:00 - How to Get and Maintain your Compliance without ticking everyone off
15:00 - Beyond the Tip of the IceBerg -- Fuzzing Binary Protocol for Deeper Code Coverage.
15:00 - What we've learned with Two-Secret Key Derivation
15:30 - #recruiterfail vs #candidatefail
16:00 - State Of Automotive Cyber Safety
17:00 - Operation Escalation: How Commodity Programs Are Evolving Into Advanced Threats
17:00 - How to Become "The" Security Pro
17:00 - Pushing Security from the Outside
17:00 - Why it's all snake oil - and that may be ok
17:00 - An Adversarial View of SaaS Malware Sandboxes
17:00 - How to travel to high-risk destinations as safely as possible
17:00 - I Love myBFF (Brute Force Framework)
17:30 - DNS Hardening - Proactive Network Security Using F5 iRules and Open Source Analysis Tools
17:30 - Evaluating a password manager
18:00 - CFPs 101
18:00 - Why does everyone want to kill my passwords?
18:00 - Ingress Egress: The emerging threats posed by augmented reality gaming.
18:00 - DYODE: Do Your Own DiodE for Industrial Control Systems.
18:00 - How to make sure your data science isn’t vulnerable to attack
18:00 - A Peek Behind Vegas Surveillance
18:30 - How to Stand Out to Talent Acquisition

Wednesday, Aug. 3, 2016

08:30 - Pentesting Industrial Control Systems : Capture the Flag!
10:00 - Crafting tailored wordlists with Wordsmith
10:00 - Don't Repeat Yourself: Automating Malware Incident Response for Fun and Profit
10:00 - Ask The EFF
10:00 - Mapping the Human Attack Surface
10:00 - Ground Truth Keynote: Great Disasters of Machine Learning
10:00 - Hacking Is Easy, Hiring Is Hard: Managing Security People
10:00 - IATC Day 2: Introduction and Overview
10:00 - Hunting high-value targets in corporate networks.
10:30 - A Noobs Intro Into Biohacking, Grinding, DIY Body Augmentation
10:30 - Uncomfortable Truths
10:35 - No Silver Bullet. Multi contextual threat detection via Machine Learning.
10:45 - Powershell-Fu – Hunting on the Endpoint
11:00 - Stop the Insanity and Improve Humanity: UX for the Win
11:00 - Survey says… Making progress in the Vulnerability Disclosure Debate
11:00 - Making Password Meters Great Again
11:30 - Owning Your Career on a Daily Basis
11:30 - There is no security without privacy
11:30 - Why Can't We Be Friends?
11:30 - Domains of Grays.
11:35 - Labeling the VirusShare Corpus: Lessons Learned
12:00 - Improving Your Personal Value Proposition to Take that Next Step in Your Career
12:00 - You Don't See Me - Abusing Whitelists to Hide and Run Malware
12:00 - Proactive Password Leak Processing
14:00 - Uncomfortable Approaches
14:00 - The Future of BSides
14:00 - Six Degrees of Domain Admin - Using BloodHound to Automate Active Directory Domain Privilege Escalation Analysis
14:00 - Mobile App Attack
14:00 - Modeling Password Creation Habits with Probabilistic Context Free Grammars
14:00 - How to Rob a Bank – or The SWIFT and Easy Way to Grow Your Online Savings Account
14:00 - Determining Normal: Baselining with Security Log and Event Data
14:00 - Automated Dorking for Fun and Pr^wSalary
14:00 - Hands-on Cryptography with Python
14:30 - Latest evasion techniques in fileless malware
15:00 - That Which Must Not Be Spoken Of: A Personal Look at Mental Health in Infosec
15:00 - Passphrases for Humans: A Cultural Approach to Passphrase Wordlist Generation
15:00 - Hacking Megatouch Bartop Games
15:00 - Is that a penguin in my Windows?
15:00 - PLC for Home Automation and How It Is as Hackable as a Honeypot
15:00 - CyPSA Cyber Physical Situational Awareness
15:00 - Hacking Tech Interviews
15:30 - Exploiting the Recruitment Process
15:30 - Automation Plumbing
16:00 - PeerLyst Meet and Greet
16:00 - IATC Closing
17:00 - Stealing Food From the Cat's Mouth
17:00 - Building an EmPyre with Python.
17:00 - Dominating the DBIR Data
17:00 - An Evolving Era of Botnet Empires
17:00 - Common Mistakes Seen in Interviews
17:00 - PAL is your pal: Bootstrapping secrets in Docker
17:00 - Digging into SIEM Alerts with Visual Graph Analytics
17:30 - Scalability: Not as Easy as it SIEMs
17:30 - Resume Reviews, Mock Interviews and Networking...Oh My!
18:00 - Cross-platform Compatibility: Bringing InfoSec Skills into the World of Computational Biology
18:00 - The Deal with Password Alternatives
18:00 - Ethical implications of In-Home Robots
18:00 - Why Snowden’s Leaks Were Inevitable
18:00 - QUESTIONING 42: Where is the “Engineering” in the Social Engineering of Namespace Compromises?
18:00 - One Compromise to Rule Them All

Presenters