Middle Ground Events Breaking Ground Common Ground Ground Floor Ground Truth Hire Ground I Am The Cavalry PasswordsCon Proving Ground Training Ground Skytalks

Find us on HackerTracker

Tuesday
August 6th

Wednesday
August 7th

08:30-08:30

Middle Ground Opens, Day 1

09:15-10:20

Opening Remarks and Keynote In Breaking Ground, Day 1

10:30-12:25

Talks

14:00-15:55

Talks

16:00-17:00

Happy Hour, Day 1

17:00-18:55

Talks

19:00-19:00

Middle Ground Closes, Day 1

07:30-07:30

Registration Opens, Day 1, Hallway at Tuscany Hotel

12:30-14:00

QueerCon Tuesday Lunch Mixer, Middle Ground at Tuscany Hotel

19:00-21:00

BSides Organizers Meet-Up, Tuscany Room at Tuscany Hotel

19:00-19:55

Security Data Science Meet-Up, Pool at the Tuscany Hotel

20:00-21:30

Friends Of Bill W Meet-Up, Day 1, Suite G-103, Tuscany Hotel

20:00-22:00

QueerCon Tuesday Night Poolside Mixer, Pool at Tuscany Hotel

21:00-23:00

Pub Quiz, Copa Lounge at Tuscany Hotel

09:15-09:30

Opening Remarks - Day One

09:30-10:15

Keynote, Day 1: "Secure AI" is 20 years old

10:30-11:25

Redis or Not: Argo CD & GitOps from an Attacker's Perspective

11:30-12:15

The Fault in Our Metrics: Rethinking How We Measure Detection & Response

14:00-14:45

Insights on using a Cloud Telescope to observe internet-wide botnet propagation activity

15:00-15:20

My Terrible Roommates: Discovering the FlowFixation Vulnerability & the Risks of Sharing a Cloud Domain

15:30-15:50

Chrome Cookie Theft on macOS, and How To Prevent It

17:00-17:45

Operation So-seki: You Are a Threat Actor. As Yet You Have No Name.

18:00-18:45

The Dark Side of TheMoon

10:30-11:15

Don’t Make This Mistake: Painful Learnings of Applying AI in Security

14:00-14:45

How We Accidentally Became Hardware Hackers

15:00-15:20

Raiders of the Lost Artifacts: Racing for Hidden Treasures in Public GitHub Repositories

15:30-15:50

Free Your Mind: Battling Our Biases

17:00-17:45

Cyber Harassment: Stop the silence, save lives

18:00-18:45

On Your Ocean's 11 Team, I'm the AI Guy (or Girl)

10:30-11:15

Detection Engineering Demystified: Building Custom Detections for GitHub Enterprise

11:30-11:50

Adversaries Also Lift & Shift: Cloud Threats Through the Eyes of an Adversary

12:00-12:20

EHLO World: Spear-Phishing at Scale using Generative AI

14:00-14:45

Insert coin: Hacking arcades for fun

15:00-15:20

Prepare for the Appocalypse - Exposing Shadow and Zombie APIs

15:30-15:50

WHOIS the boss? Building Your Own WHOIS Dataset for Reconnaissance

17:00-17:45

Tactics of a Trash Panda

18:00-18:45

Windows EventLog Persistence? The Windows can help us

10:30-11:15

Seek out new protocols, and boldly go where no one has gone before

11:30-12:15

Devising and detecting spear phishing using data scraping, large language models, and personalized spam filters

14:00-14:45

Navigating the Changing Cyber Landscape: Trends, Costs, and Risk Mitigation Strategies

15:00-15:20

Defensive Counting: How to quantify ICS exposure on the Internet when the data is out to get you

15:30-15:50

What Do We Learn When We Scan the Internet every hour?

17:00-17:45

Looking for Smoke Signals in Financial Statements, for Cyber

18:00-18:20

AI in the human loop: GenAI in security service delivery

18:30-18:50

Reassessing 50k Vulnerabilities: Insights from SSVC Evaluations in Japan's Largest Telco

10:30-11:20

Cultivating Resilience: How to Succeed in a Role that Didn’t Exist

11:30-12:20

Behavioral Interviewee-ing: Inverting the Corporate Interview to Get You Hired

13:00-13:50

Brute Force Your Job Application

14:00-14:45

What Goes Bump in the Night? Recruiter Panel About Job Search and Other Scary Things

15:00-15:45

Root To CISO

15:00-16:00

Trick or Treat: The Tricks and Treats of Job Search

15:00-16:00

How to Stop Looking for a Job, and Start Looking for Culture

10:30-11:00

Getting Serious (Un)-Resilience of Lifeline Critical Infrastructure.

11:00-11:45

Cybersecurity and Artificial Intelligence Risk Management Challenges for the Next Generation of Public Safety Systems

11:45-12:30

Security Trek: The Next Generation

14:00-15:00

Hungry, Hungry Hackers

15:00-16:00

Blood in the Water: Preparing For the Feeding Frenzy

17:00-18:00

Health Care is in Intensive Care

18:00-19:00

Living With the Enemy – How to protect yourself (and Energy Systems)

10:30-10:50

We removed passwords, now what?

11:00-11:25

Combating phone spoofing with STIR/SHAKEN - a BSidesLV crowd-sourced status quo, demo & explanation

11:30-12:15

Picking a fight with the banks

14:00-14:45

Detecting Credential Abuse

15:00-15:45

Zero downtime credential rotation

17:00-17:45

Passwords 101

18:00-18:20

Standardizing Password Surveys

18:30-18:50

CVE Hunting: Wi-Fi Routers, OSINT & 'The Tyranny of the Default'

10:30-10:55

An adversarial approach to Airline Revenue Management

11:00-11:25

And what if it was hacked? Tactics and Impacts of Adversarial Machine Learning

11:30-11:55

Disinform your Surroundings: AI and disinformation campaigns

12:00-12:25

Hacking Trust Establishment

14:00-14:25

PCR 9: How a simple misconfiguration can break TPM full disk encryption

14:30-14:55

The Immortal Retrofuturism of Mainframe Computers and How to Keep Them Safe

15:00-15:25

A Quick Story Of Security Pitfalls With Exec Commands In Software Integrations

15:30-15:55

Are you content with our current attacks on Content-Type?

17:00-17:25

Threat Modeling at Scale: More than shifting left

17:30-17:55

Demystifying SBOMs: Strengthening cybersecurity defenses

Reservations via Eventbrite are required.

10:30-14:30

Modifying Impacket for Better OpSec

10:30-19:00

Email Detection Engineering and Threat Hunting

10:30-19:00

Cloud Forensics Workshop - AI Edition - Day 1

10:30-14:30

AI Insecurity - An introduction to attacking AI and machine learning models.

10:30-14:30

Career Campaigns: Re-Specing Your Professional Class for an InfoSec Role [Tabletop RPG Workshop]

10:30-14:30

Kubernetes Security: Hands-On Attack and Defense

15:00-19:00

Solder Your Own Cat-Themed Wardriving Tool! (with DevKitty)

15:00-17:00

Trust or Bust: Unveiling Vulnerabilities in Developer Trust

15:00-19:00

Red Teaming the Software Supply Chain

15:00-19:00

Hide your kids, turn off your Wi-Fi, they Rogue APing up in here; 101

Tokens required for entry. Don't forget to pick up your Skytalks token in Middle Ground.

10:30-11:15

Psychic Paper: Cloning RFID badges and the Photo ID on them. - Session 1

11:30-11:50

Microsoft fucked it up - Session 2

11:55-12:15

SteamOS: Literally Anyone With A Keyboard Can Pwn This - Session 2

14:00-14:45

Theranos 2.0- Vapourware inside - Session 3

15:00-15:45

Weaponizing Drones and Where To Find Them - Session 4

17:00-17:45

How to lose 600,000 routers in 3 days (and almost get away with it) - Session 5

18:00-18:20

Law Enforcement and IMSI catchers – A privacy nightmare - Session 6

18:25-18:45

Confessions of an Exploit Broker - How to Efficiently Sell Your Research - Session 6

Code of Conduct & Photo Policy COVID Information

Security BSides Las Vegas, Inc. is a federally recognized 501(c)(3) since 2012

©2024 Security BSides Las Vegas, Inc.