BSidesLV 2017

BSidesLV 2017 took place July 25, 2017 through July 26, 2017 (7 years ago) at Tuscany Suites and Casino in Las Vegas, Nevada, USA.

Presentations

Tuesday, July 25, 2017

08:00 - Industrial Control System Network Analysis
08:00 - Intro to Practical Network Signature Development for Open Source IDS
08:00 - Hands-on OSINT Crash Course for Hackers
10:00 - Something Wicked: Defensible Social Architecture in the context of Big Data, Behavioral Econ, Bot Hives, and Bad Actors
10:50 - How To Lose Friends and Influence People (An Apology)
11:30 - Destructive Malware and Interstate Rivalries: The Evolution of Digital Weapons and Geopolitical Conflict
11:30 - IATC Kickoff
11:30 - GO Forth And Reverse
11:30 - Optimizations for Bitcoin key cracking
11:30 - A Day in the Life of a Product Security Incident Response Manager
11:30 - Hidden Hot Battle Lessons of Cold War: All Learning Models Have Flaws, Some Have Casualties
11:30 - Banking on Insecurity: The ongoing fairytale of securing financial institutions
11:30 - How To Accidentally Get A Job In InfoSec.
12:00 - What A Career In Public Service Is Really About
12:00 - Deep Learning Neural Networks – Our Fun Attempt At Building One
12:00 - From SOC to CSIRT
14:00 - How to escalate privileges to administrator in latest Windows.
14:00 - Extreme Mobile Application Exploitation
14:00 - Elastic-ing All the Things - Saving anything at elastic stack and having fun with detections
14:00 - Measuring the Use and Abuse of Brain Wallets
14:00 - Your model isn't that special: zero to malware model in Not Much Code and where the real work lies
14:00 - Public Policy of Things
14:00 - Navigating the Alternative Facts of Malware Prevention
14:00 - Koadic C3 - Windows COM Command & Control Framework
14:00 - Google Apps Scripts Kill Chain
14:30 - Two-Factor Auth - Demand Bidirectional
14:30 - IMSI Catchers And The Happy Yellow Helicopter: Security Challenges At Standing Rock
14:30 - Rate the Recruiter
14:30 - Getting insight out of and back into deep neural networks
15:00 - Feds <3 H4ckers
15:00 - Pwn All The Mobile Porn Apps
15:00 - Sex, Secret and God: A Brief History of Bad Passwords
15:00 - Purple Team: How This Color Can Help You And Your Organisation Learn and Get Better
15:00 - Inside MormonLeaks: the why, the how, and the what
15:00 - The Black Art of Wireless Post-Exploitation: Bypassing Port-Based Access Controls Using Indirect Wireless Pivots
15:00 - The Commoditization of Security Solutions: Will You Be Replaced by a Small Script?
15:30 - Breaking the Fourth Wall - Hacking a 50 years old myth
15:30 - Transfer Learning: Analyst-Sourcing Behavioral Classification
17:00 - Microservices And FaaS For Offensive Security
17:00 - The Human Factor: Why Are We So Bad at Security and Risk Assessment?
17:00 - Healthcare in Critical Condition
17:00 - I Club and So Can You
17:00 - Ask the EFF
17:00 - Think Complex Passwords Will Save You?
17:00 - All The Sales President’s Men
17:30 - Zero Trust Networks: In Theory and in Practice
17:30 - How To Hack Recruiting: Turning the Tables (Panel)
18:00 - Cash in the aisles: How gift cards are easily exploited
18:00 - Introduction to Reversing and Pwning
18:00 - HHS Task Force (Panel)
18:00 - Skip tracing for fun and profit
18:00 - Behavioral Analysis from DNS and Network Traffic
18:00 - The Struggle Is Real: My Journey With Mental Health Issues
18:30 - Internet of Cars
18:30 - SniffAir – An Open-Source Framework for Wireless Security Assessments
18:30 - Regulatory Nets vs. The Fishing Hook Of Litigation
19:00 - Writing Malware Without Writing Code
19:00 - Going Passwordless
19:00 - Sympathy for the Developer
19:00 - Pwning Software-Defined Networking (SDN)
19:00 - The Attack Chain Of A Nation-State (Equation Group)
19:30 - Hacking the Law: A Call for Action – Bug Bounties Legal Terms as a Case Study
19:30 - YARA-as-a-Service (YaaS): Real-Time Serverless Malware Detection

Wednesday, July 26, 2017

08:00 - Practical Malware Analysis - Hands-On
08:00 - Effective YARA
09:00 - Crams and Exams for Hams
10:00 - Hacking Is Easy, Hiring Is Hard: Managing Security People
10:00 - Safer Storage and Handling of User Answers to Security Questions
10:00 - CheckPlease - Payload-Agnostic Implant Security
10:00 - Why is China all up in my SQL server?
10:00 - Scamming the Scammers - Becoming the Robin Hood of the phones
10:00 - Hadoop Safari : Hunting For Vulnerabilities
10:00 - The New Cat and Mouse Game: Attacking and Defending Machine Learning Based Software
10:30 - Applied OSINT: Enabling Better Social Engineering for Better Pen Tests
10:30 - Mining Software Vulns in SCCM / NIST’s NVD– The Rocky Road to Data Nirvana
10:30 - Technical Tactics: Embedded Linux Software BOM
10:45 - Technical Tactics: Fear & loathing in building management systems
11:00 - Network Forensic Analysis in an Encrypted World
11:00 - One OSINT Tool to Rule Them All
11:00 - Building a Benign Data Set
11:00 - Hacking Tech Interviews
11:00 - TMTO...Y?
11:00 - Baby Got Hack Back
11:00 - Lightning Talks: Thinking Different
11:00 - Accessibility: A Creative Solution to Living Life Blind
11:30 - A System Dynamics Approach to CNO Modelling
11:30 - (In)Outsider Trading - Hacking stocks using public information and influence.
12:00 - Kick up the Jams
12:00 - The Role of Data Visualization in Improving Machine Learning Models
12:00 - Red/Blue Q&A: Pressure Test Lightning Talk Ideas
12:00 - Rethinking P@ssw0rd Strength Beyond Brute-force Entropy
12:00 - Your Facts Are Not Safe with Us: Russian Information Operations as Social Engineering
12:00 - Abusing Webhooks for Command and Control
14:00 - Hacking College, a Cybersecurity Career, and Certifications
14:00 - Protecting Windows Credentials: An Excessive Guide for Security Professionals
14:00 - Poking bears: Validating the truth from IoCs in attack postmortem reports
14:00 - IATC Cyber Crisis Simulation
14:00 - Advanced Wireless Attacks Against Enterprise Networks
14:00 - Minimum Viable Risk Management Program
14:00 - Data visualization in security: Still home of the WOPR?
14:00 - Robust Defense for the rest of Us
14:00 - SECSMASH: Using Security Products to own the Enterprise'
14:00 - Auditing Of IoT Devices
14:30 - Exploration of Novel Visualizations for Information Security Data
14:30 - It’s Not Me, It’s You: How To Be A Better Hiring Manager or Rooting Out Excellent Candidates Despite Themselves
14:30 - I got more games than Milton Bradley: Incentivize a positive change in your security culture
15:00 - DefCon DarkNet Badge Hardware And Software: An Introduction To Custom Badge Building
15:00 - Interrogation Techniques for Fun and Profit: Designing better tools for your SOC team
15:00 - (Even More) Mainframes? On my Internet?
15:00 - Magical Thinking... and how to thwart it.
15:00 - Password Cracking 201: Beyond the Basics
15:00 - Mentoring, Networking, Resume Review
15:00 - Modern Internet-Scale Network Reconnaissance
15:30 - Messing with Forensic Analysts: Modifying VSS Snapshots
15:30 - Is Data Visualization still necessary?
17:00 - Engineering My Way Into InfoSec
17:00 - Automating Crypto Bugs Discovery
17:00 - Hacks and Crafts: Improvised Physical Security Tools for Improvised Situations
17:00 - Vaccination - An Anti-Honeypot Approach
17:00 - IATC Mock Congressional Hearing
17:00 - Why can't we be friends? (Ask a Fed.)
17:00 - Hacking Office Politics for Cybersecurity Leaders
17:00 - Grappling Hooks on the Ivory Tower: This Year in Practical Academic Research
17:30 - How To Obtain 100 Facebooks Accounts Per Day Through Internet Searches
17:30 - Everything is Not Awesome: How to Overcome Barriers to Proper Network Segmentation
17:30 - Recruiter Smack Down (Panel)
18:00 - /.git/ing All Your Data
18:00 - Radio frequencies all around us! What data are you leaking and what is done with it?
18:00 - F! Passwords!
18:00 - Lessons from the front lines: New York City Cyber Command
18:00 - How to make metrics and influence people
18:00 - How To Respond To Cops Who Want Your Passwords
18:30 - How I Scanned The Internet For NSA Compromised Firewalls
18:30 - CTF all the things: Leveraging gamification to up your security game
18:45 - IATC Closing

Presenters