BSidesLV 2017

BSidesLV 2017 took place July 25, 2017 through July 26, 2017 (7 years, 3 months ago) at Tuscany Suites and Casino in Las Vegas, Nevada, USA.

Presentations

Tuesday, July 25, 2017

08:00 - Industrial Control System Network Analysis
08:00 - Hands-on OSINT Crash Course for Hackers
08:00 - Intro to Practical Network Signature Development for Open Source IDS
10:00 - Something Wicked: Defensible Social Architecture in the context of Big Data, Behavioral Econ, Bot Hives, and Bad Actors
10:50 - How To Lose Friends and Influence People (An Apology)
11:30 - Hidden Hot Battle Lessons of Cold War: All Learning Models Have Flaws, Some Have Casualties
11:30 - Banking on Insecurity: The ongoing fairytale of securing financial institutions
11:30 - Optimizations for Bitcoin key cracking
11:30 - GO Forth And Reverse
11:30 - IATC Kickoff
11:30 - A Day in the Life of a Product Security Incident Response Manager
11:30 - How To Accidentally Get A Job In InfoSec.
11:30 - Destructive Malware and Interstate Rivalries: The Evolution of Digital Weapons and Geopolitical Conflict
12:00 - What A Career In Public Service Is Really About
12:00 - Deep Learning Neural Networks – Our Fun Attempt At Building One
12:00 - From SOC to CSIRT
14:00 - Navigating the Alternative Facts of Malware Prevention
14:00 - Extreme Mobile Application Exploitation
14:00 - Elastic-ing All the Things - Saving anything at elastic stack and having fun with detections
14:00 - Measuring the Use and Abuse of Brain Wallets
14:00 - Google Apps Scripts Kill Chain
14:00 - Your model isn't that special: zero to malware model in Not Much Code and where the real work lies
14:00 - Public Policy of Things
14:00 - How to escalate privileges to administrator in latest Windows.
14:00 - Koadic C3 - Windows COM Command & Control Framework
14:30 - Getting insight out of and back into deep neural networks
14:30 - Two-Factor Auth - Demand Bidirectional
14:30 - IMSI Catchers And The Happy Yellow Helicopter: Security Challenges At Standing Rock
14:30 - Rate the Recruiter
15:00 - Purple Team: How This Color Can Help You And Your Organisation Learn and Get Better
15:00 - Sex, Secret and God: A Brief History of Bad Passwords
15:00 - Inside MormonLeaks: the why, the how, and the what
15:00 - Pwn All The Mobile Porn Apps
15:00 - The Commoditization of Security Solutions: Will You Be Replaced by a Small Script?
15:00 - The Black Art of Wireless Post-Exploitation: Bypassing Port-Based Access Controls Using Indirect Wireless Pivots
15:00 - Feds <3 H4ckers
15:30 - Transfer Learning: Analyst-Sourcing Behavioral Classification
15:30 - Breaking the Fourth Wall - Hacking a 50 years old myth
17:00 - Think Complex Passwords Will Save You?
17:00 - All The Sales President’s Men
17:00 - I Club and So Can You
17:00 - Ask the EFF
17:00 - The Human Factor: Why Are We So Bad at Security and Risk Assessment?
17:00 - Microservices And FaaS For Offensive Security
17:00 - Healthcare in Critical Condition
17:30 - Zero Trust Networks: In Theory and in Practice
17:30 - How To Hack Recruiting: Turning the Tables (Panel)
18:00 - Behavioral Analysis from DNS and Network Traffic
18:00 - HHS Task Force (Panel)
18:00 - Introduction to Reversing and Pwning
18:00 - Skip tracing for fun and profit
18:00 - The Struggle Is Real: My Journey With Mental Health Issues
18:00 - Cash in the aisles: How gift cards are easily exploited
18:30 - Internet of Cars
18:30 - Regulatory Nets vs. The Fishing Hook Of Litigation
18:30 - SniffAir – An Open-Source Framework for Wireless Security Assessments
19:00 - Pwning Software-Defined Networking (SDN)
19:00 - Writing Malware Without Writing Code
19:00 - Going Passwordless
19:00 - The Attack Chain Of A Nation-State (Equation Group)
19:00 - Sympathy for the Developer
19:30 - YARA-as-a-Service (YaaS): Real-Time Serverless Malware Detection
19:30 - Hacking the Law: A Call for Action – Bug Bounties Legal Terms as a Case Study

Wednesday, July 26, 2017

08:00 - Effective YARA
08:00 - Practical Malware Analysis - Hands-On
09:00 - Crams and Exams for Hams
10:00 - The New Cat and Mouse Game: Attacking and Defending Machine Learning Based Software
10:00 - Safer Storage and Handling of User Answers to Security Questions
10:00 - CheckPlease - Payload-Agnostic Implant Security
10:00 - Hacking Is Easy, Hiring Is Hard: Managing Security People
10:00 - Scamming the Scammers - Becoming the Robin Hood of the phones
10:00 - Hadoop Safari : Hunting For Vulnerabilities
10:00 - Why is China all up in my SQL server?
10:30 - Mining Software Vulns in SCCM / NIST’s NVD– The Rocky Road to Data Nirvana
10:30 - Applied OSINT: Enabling Better Social Engineering for Better Pen Tests
10:30 - Technical Tactics: Embedded Linux Software BOM
10:45 - Technical Tactics: Fear & loathing in building management systems
11:00 - Lightning Talks: Thinking Different
11:00 - Accessibility: A Creative Solution to Living Life Blind
11:00 - One OSINT Tool to Rule Them All
11:00 - Network Forensic Analysis in an Encrypted World
11:00 - TMTO...Y?
11:00 - Hacking Tech Interviews
11:00 - Baby Got Hack Back
11:00 - Building a Benign Data Set
11:30 - A System Dynamics Approach to CNO Modelling
11:30 - (In)Outsider Trading - Hacking stocks using public information and influence.
12:00 - Abusing Webhooks for Command and Control
12:00 - The Role of Data Visualization in Improving Machine Learning Models
12:00 - Rethinking P@ssw0rd Strength Beyond Brute-force Entropy
12:00 - Kick up the Jams
12:00 - Your Facts Are Not Safe with Us: Russian Information Operations as Social Engineering
12:00 - Red/Blue Q&A: Pressure Test Lightning Talk Ideas
14:00 - Advanced Wireless Attacks Against Enterprise Networks
14:00 - Data visualization in security: Still home of the WOPR?
14:00 - Hacking College, a Cybersecurity Career, and Certifications
14:00 - IATC Cyber Crisis Simulation
14:00 - Poking bears: Validating the truth from IoCs in attack postmortem reports
14:00 - SECSMASH: Using Security Products to own the Enterprise'
14:00 - Robust Defense for the rest of Us
14:00 - Protecting Windows Credentials: An Excessive Guide for Security Professionals
14:00 - Minimum Viable Risk Management Program
14:00 - Auditing Of IoT Devices
14:30 - It’s Not Me, It’s You: How To Be A Better Hiring Manager or Rooting Out Excellent Candidates Despite Themselves
14:30 - I got more games than Milton Bradley: Incentivize a positive change in your security culture
14:30 - Exploration of Novel Visualizations for Information Security Data
15:00 - DefCon DarkNet Badge Hardware And Software: An Introduction To Custom Badge Building
15:00 - Interrogation Techniques for Fun and Profit: Designing better tools for your SOC team
15:00 - (Even More) Mainframes? On my Internet?
15:00 - Magical Thinking... and how to thwart it.
15:00 - Password Cracking 201: Beyond the Basics
15:00 - Mentoring, Networking, Resume Review
15:00 - Modern Internet-Scale Network Reconnaissance
15:30 - Messing with Forensic Analysts: Modifying VSS Snapshots
15:30 - Is Data Visualization still necessary?
17:00 - Hacks and Crafts: Improvised Physical Security Tools for Improvised Situations
17:00 - Grappling Hooks on the Ivory Tower: This Year in Practical Academic Research
17:00 - Engineering My Way Into InfoSec
17:00 - IATC Mock Congressional Hearing
17:00 - Hacking Office Politics for Cybersecurity Leaders
17:00 - Vaccination - An Anti-Honeypot Approach
17:00 - Why can't we be friends? (Ask a Fed.)
17:00 - Automating Crypto Bugs Discovery
17:30 - Everything is Not Awesome: How to Overcome Barriers to Proper Network Segmentation
17:30 - How To Obtain 100 Facebooks Accounts Per Day Through Internet Searches
17:30 - Recruiter Smack Down (Panel)
18:00 - /.git/ing All Your Data
18:00 - F! Passwords!
18:00 - Lessons from the front lines: New York City Cyber Command
18:00 - How To Respond To Cops Who Want Your Passwords
18:00 - How to make metrics and influence people
18:00 - Radio frequencies all around us! What data are you leaking and what is done with it?
18:30 - CTF all the things: Leveraging gamification to up your security game
18:30 - How I Scanned The Internet For NSA Compromised Firewalls
18:45 - IATC Closing

Presenters