Hiring and Interviewing as Security Engineers
Insights on reducing bias in security hiring and maximizing interviews for various roles, drawing from a decade of global experience across major tech companies and startups.
Cross Site Scripting 101
Beginner-friendly introduction to Cross-Site Scripting (XSS) in web application security, including an overview and walkthrough of a basic XSS challenge from BSidesSF CTF.
Gamify Security Best Practices to Scalably Improve Engineering Culture
Discover how gamification of security best practices can enhance engineering culture and improve security observability, based on Chime's successful implementation strategy.
Using an mTLS Identity Provider to Achieve Password-less Auth, Device Health Attestation, and Low Earth Orbit
Explore Pinterest's innovative approach to secure authentication using mTLS, device health attestation, and a custom identity provider for password-less access and enhanced security.
Community Cyber Defense - How to be a Local Cyber Hero
Discover how to protect local organizations from cyber threats through volunteer efforts and become a community cyber hero.
Cyber Safety and Public Policy - I Am The Cavalry
Explore cybersecurity's impact on public safety and policy with experts from I Am The Cavalry. Gain insights into the intersection of technology, governance, and societal well-being.
Shall We Play a Game? 30 Years of the CFAA
Explore the 30-year history and impact of the Computer Fraud and Abuse Act (CFAA) with legal experts, examining its evolution, controversies, and implications for cybersecurity and digital rights.
Are You a PenTexter? - Open-Sourcing Pentest Reporting and Automation
Open-source penetration testing reporting and automation techniques to streamline security assessments and improve efficiency in identifying vulnerabilities and communicating findings.
Deep Adversarial Architectures for Detecting and Generating Maliciousness
Explore deep learning's role in cybersecurity, focusing on adversarial architectures for malware detection and generation. Learn about vulnerabilities, red team modeling, and defensive strategies.
Intro to Storage Security, Looking Past the Server
Explore storage security beyond servers, focusing on protecting data at rest and in transit. Learn key concepts and best practices for safeguarding critical information assets.
Calling All Hacker Heroes - Go Above and Beyond
Inspiring talk on ethical hacking's potential to drive positive change in cybersecurity, encouraging hackers to become heroes by going beyond traditional boundaries and making a meaningful impact.
Toward Better Password Requirements
Explore modern password security practices, including composition rules, storage methods, and authentication alternatives, to enhance digital identity protection.
Data Science or Data Pseudo-Science? - Applying Data Science Concepts to Infosec without a PhD
Explore data science concepts applied to information security, learning practical techniques without advanced degrees. Gain insights into leveraging data for enhanced cybersecurity.
Managing Security with the OWASP Assimilation Project
Explore continuous discovery, scalability, and human monitoring in cybersecurity with the OWASP Assimilation Project. Learn about architecture, attack surface analysis, and practical demonstrations.
Network Access Control - The Company-Wide Team Building Exercise That Only You Know About
Learn to implement Network Access Control effectively, involving various teams and overcoming challenges. Gain insights on recruiting allies, achieving quick wins, and troubleshooting common issues.
Dungeons & Dragons, Siege Warfare, And Fantasy Defense In Depth
Explore fantasy defense strategies inspired by D&D and siege warfare, applying them to real-world cybersecurity challenges in this innovative and engaging presentation.
Gitdigger - Creating Useful Wordlists From Public GitHub Repositories
Learn to create valuable wordlists from GitHub repositories using Gitdigger. Explore techniques for data extraction, processing, and generating outputs for various security applications.
Measuring the IQ of Your Threat Intelligence Feeds
Explore methods to evaluate and enhance threat intelligence feeds, focusing on IP addresses, metrics, and statistical tests for improved cybersecurity decision-making.
Strategies Without Frontiers
Explore game theory strategies and their applications in security, psychology, and society. Learn about equilibrium, signaling, and iterated games to enhance decision-making skills.
Oops, That Wasn't Supposed to Happen - Bypassing Internet Explorer's Cross Site Scripting Filter
Explore techniques to bypass Internet Explorer's XSS filter, uncovering vulnerabilities and enhancing web security knowledge.
Improving Security by Avoiding Traffic and Still Get What You Want in Data Transfers
Explore innovative data transfer techniques to enhance security without compromising connectivity. Learn about unidirectional gateways, database replication, and state transfer devices for improved network protection.