BSidesSF 2025: Full Schedule

11:15am PDT

Slaying Reputation Dragons: A Security Pro's Path to Influence

Saturday April 26, 2025 11:15am - 12:00pm PDT

Every security expert faces three dragons: the voice that whispers 'not expert enough,' the shadow that hides achievements, and the fear of claiming recognition. Ready to step out of the shadows and into your power as a security leader? The dragons await — will you answer the call?

Speakers

Heather Antoinetti

Saturday April 26, 2025 11:15am - 12:00pm PDT
AMC Theatre 02 AMC at Metreon

Birds of a Feather

12:30pm PDT

Capture the Flag 101

Saturday April 26, 2025 12:30pm - 2:30pm PDT

AMC Theatre 02

See registration to determine current session availability. Event filled in Sched to limit confusion.
YOU ARE REQUIRED TO REGISTER AT https://bsidessf.regfox.com/2025 TO ATTEND THIS WORKSHOP (i.e. this session cannot be reserved with Sched)
-----
Capture the Flag events are exciting and competitive, but they can be scary to developers and security practitioners who have never participated in them.

In this workshop, we introduce CTFs, discuss their benefits to developers, and examine an easy and medium-difficulty CTF challenge in depth.

Speakers

Micah Silverman

Director, Security Relations, Snyk

Micah is Snyk’s Director of Security Advocacy. With 30 years of Java Experience (yup, that’s from the beginning) and 24 years as a security professional Micah’s authored numerous articles, co-authored a Java EE book, and spoken at many conferences. He’s a maker, who’s built... Read More →

Saturday April 26, 2025 12:30pm - 2:30pm PDT
AMC Theatre 02 AMC at Metreon

Workshop

2:45pm PDT

Practical Threat Modeling

Saturday April 26, 2025 2:45pm - 4:45pm PDT

AMC Theatre 02

See registration to determine current session availability. Event filled in Sched to limit confusion.
YOU ARE REQUIRED TO REGISTER AT https://bsidessf.regfox.com/2025 TO ATTEND THIS WORKSHOP (i.e. this session cannot be reserved with Sched)
-----
Threat modeling is vital for secure systems but often seems daunting. In Practical Threat Modeling, you'll explore core concepts, frameworks, and tools; adopt an attacker's mindset; and tackle real-world scenarios. Learn to integrate threat modeling into Agile workflows and apply these skills.

Speakers

Prashant Venkatesh

Conference Committee, OWASP

Sai Santosh Vernekar

Ashwin Iyer

Director - M&A Security Architecture, Visa Inc

Saturday April 26, 2025 2:45pm - 4:45pm PDT
AMC Theatre 02 AMC at Metreon

Workshop

11:15am PDT

How are System Defenders Effectively Using LLMs?

Sunday April 27, 2025 11:15am - 12:00pm PDT

AMC Theatre 02

This BoF session brings together defensive security practitioners who are actively working with LLMs to share real-world successes, challenges, and future visions. Most teams seem to focus on reducing toil, but surely there are more interesting ways LLMs can be utilized? Come find out!

Speakers

Doug Wilson

Sunday April 27, 2025 11:15am - 12:00pm PDT
AMC Theatre 02 AMC at Metreon

Birds of a Feather

12:30pm PDT

LLM Mayhem: Hands-on Red Teaming LLM-Powered Chatbots

Sunday April 27, 2025 12:30pm - 2:30pm PDT

AMC Theatre 02

See registration to determine current session availability. Event filled in Sched to limit confusion.
YOU ARE REQUIRED TO REGISTER AT https://bsidessf.regfox.com/2025 TO ATTEND THIS WORKSHOP (i.e. this session cannot be reserved with Sched)
-----
Join us in this workshop to engage in hands-on attacks to identify weaknesses in AI-driven chatbots. If you’re interested in learning about getting started in red teaming generative AI systems, this is the workshop for you.

Speakers

Travis Smith

Jack Parker

Sunday April 27, 2025 12:30pm - 2:30pm PDT
AMC Theatre 02 AMC at Metreon

Workshop

2:45pm PDT

Building Adversary Emulation Capabilities in Your Organization

Sunday April 27, 2025 2:45pm - 4:45pm PDT

AMC Theatre 02

See registration to determine current session availability. Event filled in Sched to limit confusion.
YOU ARE REQUIRED TO REGISTER AT https://bsidessf.regfox.com/2025 TO ATTEND THIS WORKSHOP (i.e. this session cannot be reserved with Sched)
-----
This hands-on workshop equips participants to emulate real-world threat actors in a controlled lab with enterprise-grade defenses (AV, EDR, web proxies). Topics include threat intelligence, adversary emulation planning, threat hunting, custom simulations, and assessing security controls.

Speakers

Abhijith "Abx" B R

Sunday April 27, 2025 2:45pm - 4:45pm PDT
AMC Theatre 02 AMC at Metreon

Workshop