BSidesSF 2024

Attending this event?

BSidesSF 2024

9:00am PDT

Breakfast Participation Hall Coffee Participation HallApiiro • Vanta • Webflow Cyversity Participation Hall Electronic Frontier Foundation (EFF) Participation Hall Secure Diversity Participation Hall Women in CyberSecurity (WiCyS) Participation Hall Headshots AMC Lobby Sponsors Participation Hall Adversary Village Participation HallGitGuardian • Semgrep • Dropzone AI AI Village AMC Theatre 11GitGuardian • Semgrep • Dropzone AI API Security Village Participation HallGitGuardian • Semgrep • Dropzone AI Bug Bounty Village Participation HallGitGuardian • Semgrep • Dropzone AI Capture the Flag Twin PeaksGoogle Career Village Participation HallGitGuardian • Semgrep • Dropzone AI Cloud Village Participation HallGitGuardian • Semgrep • Dropzone AI Crypto & Privacy Village Participation HallGitGuardian • Semgrep • Dropzone AI Embedded Systems Village Participation HallGitGuardian • Semgrep • Dropzone AI Hardware Challenge Village Participation HallGitGuardian • Semgrep • Dropzone AI Lockpick Village Participation HallGitGuardian • Semgrep • Dropzone AI Personal Security Village Participation HallGitGuardian • Semgrep • Dropzone AI Bar and Chill Out Participation HallOptiv Lounge City View TerraceVanta Registration Mezzanine (AMC) Info Desk Lobby Prayer & Mother's Room Lobby Coat Check Coat CheckAruba HPE

10:00am PDT

🎬 Opening Remarks AMC Theatre 13Reed Loden

10:10am PDT

🎬 Navigating the AI Frontier: Investing in AI in the Evolving Cyber Landscape AMC Theatre 13Chenxi Wang

11:00am PDT

T-Shirt Sales Coat CheckEFF • Techbridge Girls • Gardens of Golden Gate Park

11:15am PDT

🎬 Hook, Line, and Tinker: A Dive into Phishing Campaign Sites AMC Theatre 15Rick Ramgattie 🎬 Beyond Quick Cash: Rethinking Bug Bounties for Greater Impact AMC Theatre 13Jayson Grace • Farah Hawa 🎬 Skynet the CTI Intern: Building Effective Machine Augmented Intelligence AMC Theatre 14Scott J Roberts 🎬 Protecting data vs systems: practicality, performance, and problems solved AMC Theatre 12Dan Draper

12:00pm PDT

🎬 Getting over the finish line: Loom Security Journey. AMC Theatre 12Narayan Gowraj • Nishant Jain 🎬 The Secret Life of Secrets AMC Theatre 13Dylan Ayrey • Hon Kwok 🎬 Security Considerations for Services Using AI Models AMC Theatre 15Shrey Bagga 🎬 Heard you liked access, so we built Access to manage your access for Access AMC Theatre 14Peter Collins • Elisa Guerrant Lunch Participation Hall

12:15pm PDT

🪿 Cloud Polyglot Support Group AMC Theatre 9Jack Murphy

12:30pm PDT

Sponsor Raffle Village Workshops Stage, Embarcadero

1:15pm PDT

💻 Kubernetes Security: Hands-On Attack and Defense AMC Theatre 9Lenin Alevski

1:30pm PDT

🎬 Advanced Persistent Teenagers: Understanding the Lapsus$ Playbook AMC Theatre 15Benjamin Hering 🎤 Combating Generative AI's Privacy Abuses AMC Theatre 13Raji Vanninathan • Trupti Shiralkar • Nandita Rao Narla • Mohammad Tahaei • Apoorvaa Deshpande 🎬 TL;DR: Applying AI to Security AMC Theatre 14Clint Gibler 🎬 Six Years in Review: Transforming Company Culture to Embrace Risk AMC Theatre 12Ariel Shin

2:30pm PDT

🎬 Startups: SOC 2 ... Now or Later? AMC Theatre 12Elyse Libetti 🎬 WhizBangLambdaFix: where AWS Misconfigurations meet Auto-Fix-It Antics AMC Theatre 15Lily Chau • Lakshmanan Murthy 🎤 Titans of Scale: Strategies to Scale Security in Expanding Organizations AMC Theatre 13Mukund Sarma • Jeevan Singh • Ariel Shin • Jacob Salassi • Julia Knecht 🎬 LLMs at the Core: From Attention to Action in Scaling Security Teams AMC Theatre 14Fotis Chantzis • Paul McMillan

3:30pm PDT

🎬 Reinventing ETL for Detection and Response Teams AMC Theatre 15Josh Liburdi 🎬 Insecurity protocols: an overview of modern authentication AMC Theatre 13Eric Chiang 🎬 Snow Nor Rain Nor Dependency Confusion: How to Deliver the Right Package AMC Theatre 14Jessica Smith • Justin Engler 🎬 Please Pick Up: Crafting and Executing Successful Vishing Attacks AMC Theatre 12Jason Puglisi 💻 API Security Workshop with OWASP crAPI AMC Theatre 9Jayesh Bapu Ahire • Anjum

4:15pm PDT

🎬 LLM Privacy Paradox: Balancing Data Utility with Security AMC Theatre 12Rob Ragan • Aashiq Ramachandran 🎬 Attacking & Defending Supply Chains. How we got Admin in your Cloud, Again AMC Theatre 15Mike Ruth 🎤 From Hacking to C-Suite: Navigating the Labyrinth of Security Careers AMC Theatre 13Caroline Wong • Nicole Grinstead • Anna Westelius • Swathi Joshi • Tanvi Vyas 🎬 Temporary Access to the Cloud: A Case Study AMC Theatre 14Tomas Rabczak

5:15pm PDT

🎬 Decoding Fraud: The Evolution and Impact of Netflix's Fraud Metrics AMC Theatre 15Aditi Gupta • Yue Wang 🎬 Effective building blocks for securing multi-tenant Kubernetes clusters AMC Theatre 13Shrikant Pandhare • Sagiv Sheelo 🎬 Securing Azure Open AI apps in the Enterprise AMC Theatre 14Karl Ots 🎬 One-Click Code Fix: Securing Code Using AI AMC Theatre 12Chandrani Mukherjee • Joseph Seasly

5:30pm PDT

Happy Hour Participation HallBolster

6:30pm PDT

Party Participation HallAdobe

9:00am PDT

Breakfast Participation Hall Coffee Participation HallApiiro • Vanta • Webflow Cyversity Participation Hall Electronic Frontier Foundation (EFF) Participation Hall Secure Diversity Participation Hall Women in CyberSecurity (WiCyS) Participation Hall Headshots AMC Lobby Info Desk Lobby Prayer & Mother's Room Lobby Registration Mezzanine (AMC) Sponsors Participation Hall Adversary Village Participation HallGitGuardian • Semgrep • Dropzone AI AI Village AMC Theatre 11GitGuardian • Semgrep • Dropzone AI API Security Village Participation HallGitGuardian • Semgrep • Dropzone AI Bug Bounty Village Participation HallGitGuardian • Semgrep • Dropzone AI Capture the Flag Twin PeaksGoogle Career Village Participation HallGitGuardian • Semgrep • Dropzone AI Cloud Village Participation HallGitGuardian • Semgrep • Dropzone AI Crypto & Privacy Village Participation HallGitGuardian • Semgrep • Dropzone AI Embedded Systems Village Participation HallGitGuardian • Semgrep • Dropzone AI Hardware Challenge Village Participation HallGitGuardian • Semgrep • Dropzone AI Lockpick Village Participation HallGitGuardian • Semgrep • Dropzone AI Personal Security Village Participation HallGitGuardian • Semgrep • Dropzone AI Bar and Chill Out Participation HallSafebase Lounge City View TerraceVanta T-Shirt Sales Coat CheckEFF • Techbridge Girls • Gardens of Golden Gate Park Coat Check Coat CheckAruba HPE

10:00am PDT

🎬 Opening Remarks AMC Theatre 13Reed Loden

10:10am PDT

🎬 Unlocking the Future: AI is the Key to CISOs Top Challenges AMC Theatre 13Caleb Sima

11:15am PDT

🎬 Effective Detection in Kubernetes Clusters AMC Theatre 15Shay Berkovich • Oren Ofer 🎬 Finetuning Large Language Models (LLMs) for Security Log Detections AMC Theatre 14Wilson Tang 🎬 Startup Security, 2nd Edition AMC Theatre 13Evan Johnson 🎬 Beyond Code and Clicks: UX Insights to Security Software AMC Theatre 12Hon Kwok • Miccah 🪿 Harnessing Human Behavior: How to Truly Influence Secure Behavior AMC Theatre 9Cassie Clark

12:00pm PDT

🎬 Beyond Labels: Evolving Data Classification AMC Theatre 12Rob Oden 🎬 AiIAM: Transforming the Democratized AWS IAM Architecture with LLMs AMC Theatre 15Anthony Scheller • Jorge L Gomez 🎬 How to Secure Cloud Machine Identities AMC Theatre 14Komal Dhull • Nathan Brahms 🎬 PirOps: What 18th-Century Piracy can Teach Us about SecOps AMC Theatre 13Aron Eidelman Lunch Participation Hall

12:15pm PDT

🪿 Why Everyone Hates Vulnerability Management & How to Make Better AMC Theatre 9Kelly Thibault • Lisa Hall

12:30pm PDT

Sponsor Raffle Village Workshops Stage, Embarcadero

1:15pm PDT

💻 Injecting and Detecting Backdoors in Code Completion Models AMC Theatre 9Tal Folkman • Guy Nachshon

1:30pm PDT

🎬 GRC Engineering - Bringing GRC to a repository near you AMC Theatre 12Varun Gurnaney 🎬 Phish & Furious: Campaign Builder Vulnerabilities in a Blink & Breach World AMC Theatre 15Raae Wolfram 🎬 Army of Proxies! How Netflix scales identity based zero trust architecture AMC Theatre 13Grant Callaghan 🎬 Effective security on a tight budget AMC Theatre 14Felix Matenaar

2:15pm PDT

🎬 Next-Gen Detection: Harnessing LLMs for Sigma Rule Automation AMC Theatre 15Dave Johnson 🎤 CISO Series Podcast (Live) AMC Theatre 13David Spark • Mike Johnson • Steve Zalewski 🎬 Pushing Boundaries: Journeys to the top of Security Engineering AMC Theatre 14Lea Snyder • Devina Dhawan 🎬 Insane in the Supply Chain: Threat modeling for attacks on AI systems AMC Theatre 12Eoin Wickens • Marta Janus

3:30pm PDT

🎬 Securing Generative AI: Is it all an Illusion? AMC Theatre 15Rachana Doshi • Michael Samson 🎬 Ransomware and Backups: A Multi-Layered Defense Strategy AMC Theatre 14Amol Sarwate 🎤 Founders R Us: Tales from recent security CEOs AMC Theatre 13Leif Dreizler • Brooke Motta • Umaimah Khan • Travis McPeak • Oliver Friedrichs 🎬 Imperfect Security: Doing Less to Achieve Better Security AMC Theatre 12Kevin Hanaford 💻 Open source endpoint security with osquery AMC Theatre 9Zach Wasserman

4:30pm PDT

🎬 Faux Data, Real Defense: ML advancements in data synthesis AMC Theatre 15Arjun Chakraborty 🎬 The road to developers' hearts AMC Theatre 14Sing Ambikapathi 🎬 AI: Best Janitor or Worst Superhero? AMC Theatre 12Adrian Sanabria 🎬 Your voice confirms my identity AMC Theatre 13Ethan McKee-Harris

5:15pm PDT

🎬 Cybersecurity meets Generative AI: Automating Your Compliance Operations AMC Theatre 12Rafae Bhatti 🎬 Long Live Short Lived Credentials - Auto-rotating Secrets At Scale AMC Theatre 15Dwayne McDaniel 🎬 Please Don't Discard - Security Data AMC Theatre 14Rishabh Gupta • Hrushikesh Paralikar 🎬 5 security startup pitches to raise money and eyebrows AMC Theatre 13Maya Kaczorowski

6:00pm PDT

🎬 Closing Ceremony AMC Theatre 13Reed Loden