BSidesLV 2019

BSidesLV 2019 took place Aug. 6, 2019 through Aug. 7, 2019 (5 years, 1 month ago) at Tuscany Suites and Casino in Las Vegas, Nevada, USA.

Presentations

Tuesday, Aug. 6, 2019

08:00 - Hack Back! Malware Reverse Engineering and Command & Control Server Exploitation
08:00 - Knowing the Unknown: Using PCAP to Break Down Application-Layer Protocols
08:00 - Malware Traffic Analysis Workshop
08:00 - Windows Breakout and Privilege Escalation
09:00 - Professionalization - Possibilities and Potholes
09:00 - Opening Remarks
09:30 - Board Communications
10:00 - Reverse Engineering the Cyber Policy API
10:00 - Keynote with Bob Lord
11:00 - Zero Trust
11:30 - I Am The Cavalry Track Welcome and Overview
11:30 - Applying Information Security Paradigms to Misinformation Campaigns: A Multidisciplinary Approach
11:30 - BEEMKA / Electron Post-Exploitation When The Land Is Dry
11:30 - Duck and (Re)Cover - The missing link in the security evolution
11:30 - DLP Sucks and Why You Should Use It
11:30 - Bestsellers in the Underground Economy - Measuring Malware Popularity by Forum
11:30 - SSO Wars: The Token Menace
11:30 - Now that you hacked the plane, what are you going to do about your career?
12:00 - Can the CAN bus fly Risks of CAN bus networks within avionics systems
12:00 - Addressing non-linear InfoSec career paths
12:00 - Examining DES-based Cipher Suite Support within the TLS Ecosystem
13:00 - Supply Chain Security
14:00 - Coordinated Disclosure of ICS Products: Who's got time for that?
14:00 - Hands-on: How to Use CALDERA's Chain Mode
14:00 - Satellite Vulnerabilities 101
14:00 - Building an enterprise security knowledge graph to fuel better decisions, faster
14:00 - What's Next in Coordinating Vulnerability Disclosures
14:00 - Where in the world are Carmen's $adjective cyber attacks: The game show that wonders why things aren't worse
14:00 - Reverse Engineering Mobile Apps: Never Pay for Transit Again
14:00 - Unpacking pkgs: A look inside macOS Installer packages and common security flaws
14:00 - Active Directory security: 8 (very) low hanging fruits and how to smash those attack paths
14:00 - Discovering Your Passion in Cyber Security
14:00 - My quest for (privileged) identity to own your domain
14:30 - Hack (Apart) Your Career - How to Fund Doing What You Love
14:30 - AIs Wide Open - Making Bots Safer Than Completely $#%cking Unsafe
14:30 - Analyzing user decision making on phishing sites - using mouse data and keyboard dynamics
14:30 - AppSec/SDLC/DevSecOps
15:00 - Broken Arrow: applying InfoSec and Forensic practices to escape domestic abuse
15:00 - Using Machines to exploit Machines - harnessing AI to accelerate exploitation
15:00 - Enterprise Overflow: How Breached Credentials Impact Us All
15:00 - Grapl - A Graph Platform for Detection and Response
15:00 - The Case for Software Bill of Materials
15:00 - The Contemplator Approach: Data Enrichment Through Elastic Stack
15:00 - Giving Credit Where It's Not Due: Visualizing Joker's Stash
15:30 - Crisis Communication & Brand Monitoring
15:30 - The Human API: Evolving End Users From Authorized Adversaries Into Our Best Defense.
16:00 - AIs Wide Open - Making Bots Safer Than Completely #$%cking Unsafe
16:30 - CISO Unconference
17:00 - Automatic Security Analysis of IoT Firmware
17:00 - China as a New Russia? Analyzing Similarities and Differences of Chinese Threat Actors from their Russian Counterparts
17:00 - Profiling User Risk: Borrowing from Business Intelligence to Understand the Security of Your Userbase
17:00 - Meltdown's Aftermath: Leveraging KVA Shadow To Bypass Security Protections
17:00 - Mind the Diversity Gap - A Panel Discussion
17:00 - Give the dog a bone - Exploring OSINT capabilities of pen-testing tools
17:00 - How to Fail Well (In Order to be Successful) - From IT to Infosec & More
17:00 - Burpsuite Team Server - Collaborative Web Pwnage
17:30 - Behind the Recruiting Curtain: What Do Recruiters Really Say and Do
17:30 - Closing Remarks
17:30 - The Resilient Hacker: Growth Mindset, Health Hacks & Powerful Help to Navigate Personal Challenges
18:00 - I Just Want to Help Make Flying More Secure...not Work with the Government or How I Learned to Love a Govvie
18:00 - So you think you can CHMOD
18:00 - Ask the EFF
18:00 - Why FIDO Security Keys & WebAuthn are Awesome
18:00 - Reducing Inactionable Alerts via Policy Layer
18:00 - Neurosecurity: where Infosec meets Brain-machine Interface
18:00 - Meet the CISO
18:30 - Evaluating Code Embeddings
18:30 - Building the badge- How you can make small, cheap and custom hardware for function or fashion
19:00 - Salesforce Data Governance What dark secrets lurk in your instance??
19:00 - Security BSides Organizers Meet-Up
20:30 - Queercon BSides Poolside Mixer
21:30 - The New Hacker Pyramid

Wednesday, Aug. 7, 2019

08:00 - Using Wireshark for Incident Response and Threat Hunting
08:00 - Hacking the STORM
08:00 - Tournament: The Ultimate Secure Coding Throw Down
08:00 - Linux Hardening - The Easy Way
08:00 - Introduction to Cryptographic Attacks
09:00 - Free and Fair Elections in an Internet Era
10:00 - Breaking Smart [Bank] Statement
10:00 - Making your website vulnerable for fun and security awareness
10:00 - Let's hear from the Hackers: What should DOJ do next?
10:00 - Loki: Add a little chaos to your USB drive
10:00 - The Road to Hell is Paved with Bad Passwords
10:00 - CTFs for Fun and Profit: Playing Games to Build your Skills
10:00 - Security data science -- Getting the fundamentals right
10:00 - How to Treat Your Hacker (and Responsible Vulnerability Disclosure)
10:30 - The Importance of Culture in Security
10:30 - Human Honeypots or: How I Learned to Stop Worrying and Love the Implant
11:00 - Prisoner Number Six
11:00 - Is This Magikarp a Gyarados?: Using Machine Learning for Phishing Detection
11:00 - An investigation of the security of passwords derived from African languages
11:00 - From EK to DEK: An Analysis of Modern Document Exploit Kits
11:00 - Hidden Networks Pivoting: Redefining DNS Rebinding Attack
11:00 - Hacking the Pentagon: How a Rebel Alliance Shifts Culture to Protect National Security
11:00 - The struggles of teaching automation
11:30 - The SOC Counter ATT&CK
11:30 - Beginners Session: Lock Picking
11:30 - Hacking from Above: A Brief Guide for Transitioning to Leadership
12:00 - (Im)proper Database Authentication
12:00 - From email address to phone number
12:00 - Excuse Me, Your Sword Is In My Eye: Responding to Red Teams and 'IRL' Threats in 2019 and Beyond
12:00 - The drunk colonel and the flipped stone: Game Theory for a Defensive Strategic Advantage
12:00 - Certification and Labeling in IoT
12:00 - Old things are new again: efficient automatic signature generation for malware classification
12:00 - Low & Slow - Techniques for DNS Data Exfiltration
13:30 - Noobs: Training the Next Generation of Security Engineers
14:00 - Who dis? The Right Way To Authenticate
14:00 - Certification and Labeling for IoT
14:00 - I'm a hunter! But what does that mean?
14:00 - Pentesting ICS 102
14:00 - Real World Security in a Clinical Healthcare Environment: Hacking a Hospital
14:00 - Finding Evil with Mitre ATT&CK and the Elastic Stack
14:00 - Reduce, Reuse and Recycle ML models - and the security powers is yours
14:00 - Hands on Hacking The OWASP TOP 10 and beyond
14:00 - Windows 10 DFIR Challenges
14:00 - Startup Security Leadership: Lessons to Level Up from Fortune 100 to Tech Startup
14:00 - Escape the Questionnaire Quagmire: A thoughtful approach to addressing security inquiries from customers and prospects
14:00 - Virtual Breakpoints for x86_64
14:30 - Breaking the Bodyguards
14:30 - Getting CVSS, NVD, and CVEs to Work for You: Standardizing and Scaling Your Vulnerability Risk Analysis
15:00 - ATT&CKing Your Adversaries -- Operationalizing cyber intelligence in your own environment for better sleep and a safer tomorrow.
15:00 - Have You Distributed Randomness?
15:00 - Exploiting Windows Group Policy for Reconnaissance and Attack
15:00 - Scheming with Machines: Using ML to Support Offensive Teams
15:00 - Cover Your A**
15:00 - ROP with a 2nd Stack, or This Exploit is a Recursive Fibonacci Sequence Generator
15:00 - Why journalists and hackers need each other (a panel discussion with infosec reporters)
15:30 - Cyber Deception after Detection: Safe observation environment using Software Defined Networking
16:00 - Lock Picking Contest
16:00 - Why we need a Cyber Peace Institute
16:00 - HSC^2 Hacker Summer Camp Hacker Standup Comedy
17:00 - At Your Service - Abusing the Service Workers Web API
17:00 - Birthday Hunting
17:00 - Deepfakes, Deep Trouble: Addressing Potential Market Manipulation Caused by Deepfakes
17:00 - We the People: Providing for a 'common defence' with CVD
17:00 - CloudSec Rules Everything Around Me (C.R.E.A.M.)
17:00 - Cyber Threat Intel & APTs 101
17:00 - Why can't we be friends? (Ask a Fed & the EFF.)
17:30 - All that glitters isn't Chrome: Hunting for suspicious browser extensions
17:30 - Baited Canaries - Monitoring attackers with active beacons
18:00 - Scratching the Surface of Risk
18:00 - Meet the Nation This Week on Sunday: A Special Vulnerability Edition
18:00 - No IOUs with IOT
18:00 - HAM License Exams
18:00 - State of DNS Rebinding - Attack & Prevention Techniques and the Singularity of Origin
18:00 - Musings of an Accidental CISO
18:00 - Securing Fast (and Furious) DevOps pipelines
18:30 - Please inject me, a x64 code injection
18:30 - "Hackers of the world - unite?"
19:00 - Closing Ceremonies
20:00 - Friends of Bill W
22:00 - BSidesLV Pool Party

Presenters