BSidesSF 2025

BSidesSF 2025

9:00am PDT

Breakfast Participation Hall Espresso & Coffee Participation HallDeepTempo • Meta • Vanta Headshots TBDOpal Security Sponsors Participation Hall Capture the Flag TBDAdobe Bar and Chill Out Participation HallrunZero Lounge City View TerracerunZero Registration TBD Villages Participation Hall Info Desk Lobby Prayer & Mother's Room Lobby Coat Check Coat Check

10:00am PDT

Opening Remarks (Saturday) AMC IMAX

10:15am PDT

Keynote (Saturday) AMC IMAXClint Gibler

11:00am PDT

T-Shirt Sales Coat Check

11:15am PDT

Let's talk about the AI apocalypse. AMC IMAXDylan Ayrey Lex Sleuther - A Novel Approach to Script Language Detection AMC Theatre 09Aaron James The hidden access paths to Smaugs Caven AMC Theatre 07Ben Arent Guardians of AI Safety -Assembling Heroes to Conquer Dragons of the Future AMC Theatre 01Raji Vanninathan Slaying Reputation Dragons: A Security Pro's Path to Influence AMC Theatre 02Heather Antoinetti AppSec as Glue: Building Partnerships to Scale Security AMC Theatre 13Mukund Sarma • Jeevan Singh • Ariel Shin • Jacob Salassi How to train your Detection Dragon? AMC Theatre 06Geet Pradhan Inside the Information Stealer Ecosystem: From Compromise to Countermeasure AMC Theatre 15Olivier Bilodeau

12:00pm PDT

Navigating the Unknowns: Fraud Mitigation for Netflix Live Events AMC IMAXAditi Gupta • Yue Wang One SOC, The Whole SOC, and Nothing But The SOC, So Help Me AMC Theatre 07Carson Zimmerman Resiliency in the uncharted AI landscape AMC Theatre 11Ranita Bhattacharyya The Art of Cybersecurity Mastery: From Entry-Level to Staff+ AMC Theatre 09Florian Noeding Lunch Participation Hall

12:30pm PDT

Sponsor Raffle TBD Capture the Flag 101 AMC Theatre 02Micah Silverman Shifting Left - a hands on introductory guide to DevSecOps AMC Theatre 01William Reyor • Andrew Dennis

1:00pm PDT

TBD (Podcast) AMC Theatre 13 Into The Dragon’s Den AMC Theatre 06Jacob Salassi • Michele Freschi Light in the Labyrinth: Attack Path Analysis for Anyone AMC Theatre 15Parker Shelton

1:30pm PDT

Centralizing Egress Access Controls Across a Hybrid Environment at Block AMC Theatre 07Ramesh Threat Modeling Meets Model Training: Web App Security Skills for AI AMC Theatre 11Breanne Boland WHOIS Your Daddy: Tracking Iranian-backed cyber operations with Passive DNS AMC Theatre 09Austin

2:00pm PDT

Future-Proof Your Career: Evolving in the Age of AI AMC Theatre 13Jay Sarwate • Alok Tongaonkar • Prutha Parikh • Ketan Nilangekar Hack, Patch, Repeat: Insider Tales from Android’s Bug Bounty AMC Theatre 15Maria Uretsky • Olivier Tuchon

2:15pm PDT

Adventures & Findings in ISP Hacking AMC Theatre 09Ian Foster Log In Through the Front Door: Automating Defense Against Credential Leaks AMC Theatre 07Barath Subramaniam One Search To Rule Them All: Threat Modelling AI Search AMC Theatre 11Kane Narraway Versus Killnet AMC IMAXAlex Holden

2:45pm PDT

How to Build Security Products that People Actually Buy AMC Theatre 01Emily Patterson Practical Threat Modeling AMC Theatre 02prashant venkatesh • Sai Santosh Vernekar • Ashwin

3:00pm PDT

Decoding GraphQL: How to Map Hidden Vulnerabilities AMC Theatre 09Antoine Carossio • Tristan Kalos Everyday AI: Leveraging LLMs for simple, effective security automation AMC Theatre 11Matthew Sullivan • Dominic Zanardi From LOL to LOC: LOLBins are No Laughing Matter AMC Theatre 07Avishay Zawoznik Tracking the Worlds Dumbest Cyber-Mercenaries AMC IMAXCooper Quintin • Eva Galperin Uncharted Minds: Exploring Neuroscience, Burnout and Cognitive Strengths AMC Theatre 13Deidre Diamond • Peter Coroneos • Kayla Williams 0.0.0.0 Day: Exploiting Localhost APIs From The Browser AMC Theatre 15Gal Elbaz Data Splicing Attacks: Breaking Enterprise DLP from the Inside Out AMC Theatre 06Jeswin Mathai • Audrey Adeline

3:45pm PDT

Fake Hires, Real Threats: When Background Checks Aren’t Enough AMC Theatre 09Mabel Soe Something’s Phishy: See the Hook Before the Bait AMC Theatre 07Malachi Walker Trawling for IOCs: Catching C2 in a sea of data AMC IMAXMoses Schwartz Using AI to discover silently patch vulnerabilities in open-source AMC Theatre 11Mackenzie Jackson

4:00pm PDT

TBD (Podcast) AMC Theatre 13 Decentralized Communications: Deep-Dive into APRS and Meshtastic AMC Theatre 06Ankur Tyagi • Mayuresh Dani Service Mesh Security: Shifting Focus to the Application Layer AMC Theatre 15Daniel Popescu

4:30pm PDT

Blank Space: Filling the Gaps in Atomic and Behavioral Cloud-Specific IoCs AMC Theatre 07Merav Bar • Gili Tikochinski BSidesSF plays incident response AMC IMAXMaya Kaczorowski • Whitney Merrill Dragging out Dragons: Slaying Hidden Threats in Residential Proxies AMC Theatre 09Christo Roberts Enhancing Secret Detection in Cybersecurity with Lean LLMs AMC Theatre 11Danny Lazarev • Erez Harush

5:00pm PDT

Can Cyber Mercenaries and Human Rights Coexist? AMC Theatre 13Bill Marczak • Cooper Quintin • Eva Galperin Netsec is dead(?): Modern Network Fingerprinting for Real-World Defense AMC Theatre 15Vlad Iliushin

5:15pm PDT

Mind vs Machine: Role of Human Psychology and AI in Security Culture AMC Theatre 11Anubha Nagawat • Ashutosh Gupta

5:30pm PDT

Happy Hour Participation HallWiz

6:30pm PDT

Party Participation HallWiz

9:00am PDT

Breakfast Participation Hall Espresso & Coffee Participation HallDeepTempo • Meta • Vanta Headshots TBDOpal Security Info Desk Lobby Prayer & Mother's Room Lobby Registration TBD Sponsors Participation Hall Capture the Flag TBDAdobe Villages Participation Hall Bar and Chill Out Participation Hall Lounge City View Terrace T-Shirt Sales Coat Check Coat Check Coat Check

10:00am PDT

Opening Remarks (Sunday) AMC IMAX

10:15am PDT

Keynote (Sunday) AMC IMAXSwathi Joshi

11:15am PDT

Not every groundbreaking idea needs to become a billion-dollar startup AMC IMAXRoss Haleliuk The Four Tribes of Security Champions AMC Theatre 07Marisa Fagan The Growing Crisis in CVE Data Quality AMC Theatre 09Jerry Gamblin AI Dragons: Threats, Risks, and What We Can Do About Them AMC Theatre 01Tanya Janca

11:30am PDT

Mind the Gap: Career Growth and Management for Security Engineers AMC Theatre 13Josh Liburdi • elle mckenna • Sarai Rosenberg • Andrew Kline Don’t Sh*t-Left: How to Actually Shift-Left AMC Theatre 15Ahmad Sadeddin Trace to Triage: How to Connect Product Vulnerabilities to Security Paths AMC Theatre 06Ben Stav

12:00pm PDT

Lessons from running a product security-focused cybersecurity clinic AMC Theatre 07Aditya Saligrama • Joey Holtzman Preparing for Dragons: Don’t Sharpen Swords. Set Traps, Gather Supplies! AMC IMAXAdrian Sanabria The Product Security Imperative: Lessons from CISA AMC Theatre 09Jack Cable Lunch Participation Hall

12:30pm PDT

Sponsor Raffle TBD LLM Mayhem - Hands on Red Teaming LLM Powered Chatbots AMC Theatre 02Travis Smith • Jack Parker Purple Teaming Okta Detections AMC Theatre 01Ken Westin

1:15pm PDT

State of (Absolute) AppSec AMC Theatre 13Seth Law • Lakshmi Sudheer AI's Bitter Lesson for SOCs: Let Machines Be Machines AMC Theatre 11Jackie Bow • Peter Sanford Confidential Computing: Protecting Customer Data in the Cloud AMC Theatre 15Jordan Mecom CyberCAN: A Roadmap for Municipal Support of Nonprofit Cybersecurity in SF AMC Theatre 06Sarah Powazek • Shannon Pierson

1:30pm PDT

Iron-Clad PKI - Crypto Agility for the Quantum Era AMC Theatre 07Prasanth Sundararajan The Power of Persuasion: Better Security Through... Manipulation? AMC IMAXNate Lee

2:15pm PDT

Charting the SSH Multiverse AMC IMAXHD Moore don't trust, verify! - how I found a CSRF bug hiding in plain sight AMC Theatre 15Patrick O'Doherty There and Back Again: Discovering OT devices across protocol gateways AMC Theatre 07Rob King Third Party Risk Management: SOC 2s, security questionnaires, and psychosis AMC Theatre 09Eleanor Mount CISO Series (Podcast) AMC Theatre 13 Compliance Without the Chaos: Building it Right into Your DevOps Pipeline AMC Theatre 06Varun Gurnaney Securing AI agents: Exploring Critical Threats and Exploitation Techniques AMC Theatre 11Naveen Konrajankuppam Mahavishnu • Mohankumar Vengatachalam

2:45pm PDT

Building adversary emulation capabilities in your organization AMC Theatre 02Abhijith "Abx" B R Harnessing GenAI for Cutting-Edge Detection Engineering AMC Theatre 01Matt Bromiley

3:00pm PDT

A Deep Dive into the Triad Nexus Pig Butchering & Money Laundering Network AMC IMAXZach Edwards Care and Feeding of HSMs: Key Management in Hard Mode AMC Theatre 15Nick Pelis Intro to Privacy-Enhancing Technologies (PETs) AMC Theatre 07Harshal Shah Radical Results: A security org's version of radical candor AMC Theatre 09Evan Johnson

3:15pm PDT

15 Years of BSidesSF: Behind the Scenes AMA AMC Theatre 13 How to Tame Your Dragon: Productionizing Agentic Apps Reliably and Securely AMC Theatre 11Thomas Vissers • Tim Van hamme When AI Goes Awry: Responding to AI Incidents AMC Theatre 06Eoin Wickens • Marta Janus

3:45pm PDT

Scalably Securing Third-party Dependencies in Heterogenous Environments AMC IMAXZiyad Edher Shadow IT Battlefield: The CyberHaven Breach and Defenses that worked AMC Theatre 15Rohit Bansal Trust Engineering: Building Security Leadership at Early-Stage Startups AMC Theatre 07Mike Privette

4:15pm PDT

Slaying Dragons Together: Multidisciplinary Solutions to Security Issues AMC Theatre 13Stanley Barr Effective Handling of Third-Party Supplier Incidents AMC Theatre 06Kasturi Puramwar

4:30pm PDT

Fireproof your castle with risk-first GRC AMC Theatre 07Aakash Yadav • Lindsey Pilver How to pull off a near undetectable DDoS attack (and how to stop it) AMC IMAXSimon Wijckmans Round and Around we go - Interviews, what do you know? AMC Theatre 09Erin Barry Understanding IRSF Fraud: Protecting Against SMS Exploitation AMC Theatre 15Vien Van • Senthil

5:15pm PDT

Closing Remarks AMC Theatre 13