Security BSides San Francisco

BSidesSF is an Information / Security conference that’s different. We’re a 100% volunteer-organized event, put on by and for the community, and we truly strive to keep information easily accessible.

San Francisco

Browse by Year

2025 2024 2023 2022 2020 2019 2018 2017 2016

2025

View All 93 Videos

BSidesSF 2025 - Adventures & Findings in ISP Hacking (Ian Foster)

Adventures & Findings in ISP Hacking

Network Security

BSidesSF 2025 - 0.0.0.0 Day: Exploiting Localhost APIs From The Browser (Gal Elbaz)

0.0.0.0 Day: Exploiting Localhost APIs From The Browser

BSidesSF 2025 - AI Won’t Help You Here (Ian Amit)

AI Won’t Help You Here

BSidesSF 2025 - AI's Bitter Lesson for SOCs: Let Machines Be Machines (Jackie Bow, Peter Sanford)

AI's Bitter Lesson for SOCs: Let Machines Be Machines

Jackie Bow , Peter Sanford

BSidesSF 2025 - AppSec as Glue... (Mukund Sarma, Tad Whitaker, Sarah Liu, Ariel Shin, Jacob Salassi)

AppSec as Glue...

Ariel Shin , Jacob Salassi , Mukund Sarma , Sarah Liu , Tad Whitaker

Compliance

BSidesSF 2025 - Care and Feeding of HSMs: Key Management in Hard Mode (Nick Pelis)

Care and Feeding of HSMs: Key Management in Hard Mode

Cryptography

2024

View All 61 Videos

BSidesSF 2024 - 5 security startup pitches to raise money and eyebrows (Maya Kaczorowski)

5 security startup pitches to raise money and eyebrows

Maya Kaczorowski

Startup

BSidesSF 2024 - AI: Best Janitor or Worst Superhero? (Adrian Sanabria)

AI: Best Janitor or Worst Superhero?

Adrian Sanabria

BSidesSF 2024 - Advanced Persistent Teenagers: Understanding the Lapsus$ Playbook (Benjamin Hering)

Advanced Persistent Teenagers: Understanding the Lapsus$ Playbook

Benjamin Hering

BSidesSF 2024 - AiIAM: Transforming the Democratized AWS IAM... (Anthony Scheller, Jorge L Gomez)

AiIAM: Transforming the Democratized AWS IAM...

Anthony Scheller , Jorge L Gomez

AWS Identity Management

BSidesSF 2024 - Army of Proxies! How Netflix scales identity based zero trust... (Grant Callaghan)

Army of Proxies! How Netflix scales identity based zero trust...

Grant Callaghan

Zero Trust

BSidesSF 2024 - Attacking & Defending Supply Chains. How we got Admin in your Cloud,... (Mike Ruth)

Attacking & Defending Supply Chains. How we got Admin in your Cloud,...

2023

View All 75 Videos

BSidesSF 2023 - Advanced Attack Vectors in Azure Environments (Zur Ulianitzky, Bill Ben Haim)

Advanced Attack Vectors in Azure Environments

Bill Ben Haim , Zur Ulianitzky

Azure

BSidesSF 2023 - Backup Plans for Your Backup Plans for Your Backup Plans (Margaret Fero)

Backup Plans for Your Backup Plans for Your Backup Plans

Business Continuity

BSidesSF 2023 - Building Production-Grade End to End Encrypted App... (Ehsan Asdar, Nishil Shah)

Building Production-Grade End to End Encrypted App...

Ehsan Asdar , Nishil Shah

Compliance Observability Privacy

BSidesSF 2023 - Building an Endpoint Security program from scratch (Nishith Shah)

Building an Endpoint Security program from scratch

BSidesSF 2023 - Cameras, CACs & Clocks: A Story of Millions of Interrogated and... (John Vecchi)

Cameras, CACs & Clocks: A Story of Millions of Interrogated and...

BSidesSF 2023 - Career Village - tales from a hiring manager (Sacha Faust)

Career Village - tales from a hiring manager

2022

View All 37 Videos

BSidesSF 2022 - Keynote: Building Sustainable Security Programs (Astha Singhal)

Keynote: Building Sustainable Security Programs

Burnout Keynote

BSidesSF 2022 - Achieving the Web Isolation Nirvana - How far ... (Pedro Fortuna • Jasvir Nagra)

Achieving the Web Isolation Nirvana - How far ...

Jasvir Nagra , Pedro Fortuna

BSidesSF 2022 - Rise of the Vermilion ... (Avigayil Mechtinger • Ryan Robinson)

Rise of the Vermilion ...

Avigayil Mechtinger , Ryan Robinson

Malware Red Team

BSidesSF 2022 - Achieving HITRUST on a Budget (Shobhit Mehta)

Achieving HITRUST on a Budget

BSidesSF 2022 - An Unlikely Friendship: Why Security Engineers ... (Leif Dreizler • Rachel Landers)

An Unlikely Friendship: Why Security Engineers ...

Leif Dreizler , Rachel Landers

BSidesSF 2022 - Attacking and Defending Infrastructure with Terraform... (Mike Ruth • Francisco Oca)

Attacking and Defending Infrastructure with Terraform...

Francisco Oca , Mike Ruth

Secrets

2020

View All 58 Videos

BSidesSF 2020 - Mistakes Made Integrating Security Scanning into CI/CD (Atul G • Moses S)

Mistakes Made Integrating Security Scanning into CI/CD

Atul Gaikwad , Moses Schwartz

BSidesSF 2020 - What Should and Shouldn’t Scare You: Kubernetes and Containers (Connor Gilbert)

What Should and Shouldn’t Scare You: Kubernetes and Containers

BSidesSF 2020 - 2FA in 2020 and Beyond (Kelley Robinson)

2FA in 2020 and Beyond

Kelley Robinson

Authentication Multi Factor Authentication User Experience +1

BSidesSF 2020 - A Look at Jython-Enhanced Reverse Engineering with Ghidra (Byron Roosa)

A Look at Jython-Enhanced Reverse Engineering with Ghidra

Malware Malware Analysis Reverse Engineering

BSidesSF 2020 - Adventures in Vendor Security and Continuous Review (Lokesh Pidawekar)

Adventures in Vendor Security and Continuous Review

Lokesh Pidawekar

BSidesSF 2020 - An Effective Approach to Software Obfuscation (Yu-Jye Tung)

An Effective Approach to Software Obfuscation

2019

View All 65 Videos

BSidesSF 2019 - A Deep Dive into Go Malware: Using Metadata to Empower the Analyst (Joakim Kennedy)

A Deep Dive into Go Malware: Using Metadata to Empower the Analyst

Malware

BSidesSF 2019 - Abusing WCF Endpoint for RCE and Privilege Escalation (Christopher Anastasio)

Abusing WCF Endpoint for RCE and Privilege Escalation

Christopher Anastasio

Exploit Development Monitoring Remote Code Execution

BSidesSF 2019 - All Your Containers Are Belong to Us (James Condon)

All Your Containers Are Belong to Us

BSidesSF 2019 - Anti-Privacy Anti-Patterns (Sarah Harvey)

Anti-Privacy Anti-Patterns

Privacy

BSidesSF 2019 - Arcades and Audits: What Gaming Can Do for Your Security Posture (Miranda Fullerton)

Arcades and Audits: What Gaming Can Do for Your Security Posture

Miranda Fullerton

Blue Team Gamify

BSidesSF 2019 - Ask the EFF (Andrew C • Kurt O • Cooper Q • Sydney L • India M • Alexis H • Alex M)

Ask the EFF

Alex Moss , Alexis Hancock , Andrew Crocker , Cooper Quintin , India McKinney , Kurt Opsahl , Sydney Li

Panel Privacy

2018

View All 54 Videos

BSidesSF 2018 - The Memory of a Meltdown (Shane Cota • Chris Magistrado)

The Memory of a Meltdown

Chris Magistrado , Shane Cota

BSidesSF 2018 - A Case Study of MacOS Supply Chain Compromise (Jason Craig • Michael George)

A Case Study of MacOS Supply Chain Compromise

Jason Craig , Michael George

Malware Supply Chain

BSidesSF 2018 - An Open Source Malware Classifier and Dataset (Phil Roth)

An Open Source Malware Classifier and Dataset

Malware

BSidesSF 2018 - Ask the EFF (N Cardozo • A Crocker • G Gebhart • S Lacambra • S Li • K Opsahl)

Ask the EFF

Andrew Crocker , Gennie Gebhart , Kurt Opsahl , Nate Cardozo , Stephanie Lacambra , Sydney Li

Panel

BSidesSF 2018 - Blue Team Fundamentals (Benjamin Hering)

Blue Team Fundamentals

Benjamin Hering

Blue Team Phishing

BSidesSF 2018 - Building Intelligent Automatons with Semantic Reasoning (Anton Goncharov)

Building Intelligent Automatons with Semantic Reasoning

Anton Goncharov

Monitoring

2017

View All 35 Videos

BSidesSF 2017 - Better SSH management with ephemeral keys (Vivian Ho & Chris Steipp)

Better SSH management with ephemeral keys

Vivian Ho & Chris Steipp

BSidesSF 2017 - #securityselfie (size up your appsec program with new metrics) (Jim O'Leary)

#securityselfie (size up your appsec program with new metrics)

Appsec Monitoring

BSidesSF 2017 - 5 Keys to Building an App Sec Program in the Age of DevOps (Tim Jarrett)

5 Keys to Building an App Sec Program in the Age of DevOps

BSidesSF 2017 - Access Control with Concierge: One Tool to Rule Them All (Karthik Rangarajan)

Access Control with Concierge: One Tool to Rule Them All

Karthik Rangarajan

AWS Startup

BSidesSF 2017 - Ask the EFF (Kurt Opsahl, Erica Portnoy, Gennie Gebhart, Jamie Lee Williams, ..)

Ask the EFF

Erica Portnoy , Gennie Gebhart , Jamie Lee Williams , Kurt Opsahl , Nate Cardozo

Panel

BSidesSF 2017 - Assessing the Embedded Devices On Your Network (David Tomaschik)

Assessing the Embedded Devices On Your Network

David Tomaschik

Threat Model Voip

2016

View All 32 Videos

BSidesSF 2016 - A year in the wild: fighting malware at the corporate level (Kuba Sendor)

A year in the wild: fighting malware at the corporate level

Forensics Incident Response Malware +3

BSidesSF 2016 - APT Reports and OPSEC Evolution (Gadi Evron)

APT Reports and OPSEC Evolution

Opsec

BSidesSF 2016 - Abusing Security Products to Bypass Windows Protections (Tomer Bitton, Udi Yavo)

Abusing Security Products to Bypass Windows Protections

Tomer Bitton , Udi Yavo

Exploits Opsys Threats

BSidesSF 2016 - Access Control in 2016 - deep dive (Dr. Ulrich Lang)

Access Control in 2016 - deep dive

Dr. Ulrich Lang

Compliance Permissions

BSidesSF 2016 - Adv techniques for real time detection of polymorphic malware (Ajit Thyagarajan)

Adv techniques for real time detection of polymorphic malware

Ajit Thyagarajan

Malware

BSidesSF 2016 - Ask the EFF (Kurt Opsahl Eva Galperin Andrew Crocker Shahid Buttar Cooper Quintin)

Ask the EFF

Andrew Crocker , Cooper Quintin , Eva Galperin , Kurt Opsahl , Shahid Buttar

Panel